Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-116849 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCas
NEAR-REAL-TIME
CVE-2026-116849 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-116846 - Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con
NEAR-REAL-TIME
CVE-2026-116846 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-116406 - Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf
NEAR-REAL-TIME
CVE-2026-116406 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-116387 - Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Acc
NEAR-REAL-TIME
CVE-2026-116387 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
HIGH
CVE-2026-115713 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un
NEAR-REAL-TIME
CVE-2026-115713 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115712 - Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-le
NEAR-REAL-TIME
CVE-2026-115712 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115711 - Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E
NEAR-REAL-TIME
CVE-2026-115711 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
HIGH
CVE-2026-115709 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un
NEAR-REAL-TIME
CVE-2026-115709 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
HIGH
CVE-2026-115708 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to au
NEAR-REAL-TIME
CVE-2026-115708 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115707 - Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E
NEAR-REAL-TIME
CVE-2026-115707 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115706 - Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escal
NEAR-REAL-TIME
CVE-2026-115706 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Publi
NEAR-REAL-TIME
CVE-2026-115610 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115605 - Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
NEAR-REAL-TIME
CVE-2026-115605 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-115601 - Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiti
NEAR-REAL-TIME
CVE-2026-115601 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-114706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te
NEAR-REAL-TIME
CVE-2026-114706 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-114181 - Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager al
NEAR-REAL-TIME
CVE-2026-114181 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-110881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S
NEAR-REAL-TIME
CVE-2026-110881 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107024 - Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite anot
NEAR-REAL-TIME
CVE-2026-107024 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-107023 - Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrari
NEAR-REAL-TIME
CVE-2026-107023 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107021 - Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows u
NEAR-REAL-TIME
CVE-2026-107021 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗