Security Operations
Threat Intelligence
❓
MEDIUM
CVE-2026-70381 - An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-devi
NEAR-REAL-TIME
CVE-2026-70381 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:18
Source ↗
MEDIUM
CVE-2026-70380 - A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE
NEAR-REAL-TIME
CVE-2026-70380 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:18
Source ↗
HIGH
CVE-2026-116576 - systeminformation: systeminformation: Command injection via improper quotation mark sanitization
NEAR-REAL-TIME
CVE-2026-116576 · Red Hat - CVE Feed · published 2026-10-26T20:18 · correlated from 3 sources
Red Hatsysteminformation
Source ↗
INFORMATIONAL
CVE-2026-65632 - The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyin
NEAR-REAL-TIME
CVE-2026-65632 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-65631 - Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion de
NEAR-REAL-TIME
CVE-2026-65631 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-65630 - Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key throug
NEAR-REAL-TIME
CVE-2026-65630 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-65629 - Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passwor
NEAR-REAL-TIME
CVE-2026-65629 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-65628 - jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. It
NEAR-REAL-TIME
CVE-2026-65628 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-65627 - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows
NEAR-REAL-TIME
CVE-2026-65627 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-65626 - The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_d
NEAR-REAL-TIME
CVE-2026-65626 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
oracle
Source ↗
INFORMATIONAL
CVE-2026-65625 - The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacke
NEAR-REAL-TIME
CVE-2026-65625 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-57196 - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
NEAR-REAL-TIME
CVE-2026-57196 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-57193 - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
NEAR-REAL-TIME
CVE-2026-57193 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-57187 - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
NEAR-REAL-TIME
CVE-2026-57187 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
INFORMATIONAL
CVE-2026-57184 - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
NEAR-REAL-TIME
CVE-2026-57184 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
LOW
CVE-2026-116482 - A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2
NEAR-REAL-TIME
CVE-2026-116482 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
MEDIUM
CVE-2026-116479 - A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JS
NEAR-REAL-TIME
CVE-2026-116479 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
MEDIUM
CVE-2026-116478 - A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2as
NEAR-REAL-TIME
CVE-2026-116478 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
MEDIUM
CVE-2026-116477 - A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fu
NEAR-REAL-TIME
CVE-2026-116477 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17
Source ↗
HIGH
CVE-2026-115924 - Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled
NEAR-REAL-TIME
CVE-2026-115924 · NIST NVD - National Vulnerability Database · published 2026-10-26T20:17 · correlated from 2 sources
rembg
Source ↗