Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-119052 - llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenti
NEAR-REAL-TIME
CVE-2026-119052 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-119051 - flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to cr
NEAR-REAL-TIME
CVE-2026-119051 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-119050 - Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary
NEAR-REAL-TIME
CVE-2026-119050 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-119049 - FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another us
NEAR-REAL-TIME
CVE-2026-119049 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-119048 - JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that
NEAR-REAL-TIME
CVE-2026-119048 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-118425 - A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solut
NEAR-REAL-TIME
CVE-2026-118425 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-116857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar
NEAR-REAL-TIME
CVE-2026-116857 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-116402 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForm
NEAR-REAL-TIME
CVE-2026-116402 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-116399 - Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request For
NEAR-REAL-TIME
CVE-2026-116399 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113697 - Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticate
NEAR-REAL-TIME
CVE-2026-113697 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113696 - Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.
NEAR-REAL-TIME
CVE-2026-113696 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113695 - Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite version
NEAR-REAL-TIME
CVE-2026-113695 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113694 - Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.
NEAR-REAL-TIME
CVE-2026-113694 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113693 - Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.
NEAR-REAL-TIME
CVE-2026-113693 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113692 - Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and
NEAR-REAL-TIME
CVE-2026-113692 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113691 - Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01
NEAR-REAL-TIME
CVE-2026-113691 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-56056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The
NEAR-REAL-TIME
CVE-2026-56056 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-52709 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video Gal
NEAR-REAL-TIME
CVE-2026-52709 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
HIGH
CVE-2026-49142 - OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that all
NEAR-REAL-TIME
CVE-2026-49142 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-48196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali For
NEAR-REAL-TIME
CVE-2026-48196 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗