Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-119135 - wasmtime: Wasmtime: Denial of Service via component stream type mismatch
NEAR-REAL-TIME
CVE-2026-119135 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-119134 - wasmtime: Wasmtime: Denial of Service via unbounded memory growth in resource handle tables
NEAR-REAL-TIME
CVE-2026-119134 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-119133 - wasmtime: wasmtime: Undefined behavior via misaligned VMContext layout
NEAR-REAL-TIME
CVE-2026-119133 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-119132 - wasmtime: wasmtime: Denial of Service via overlapping string transcoding in fused adapters
NEAR-REAL-TIME
CVE-2026-119132 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-119124 - ImageMagick: ImageMagick: Denial of service via heap-based buffer overflow in -morph option
NEAR-REAL-TIME
CVE-2026-119124 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-119123 - ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder
NEAR-REAL-TIME
CVE-2026-119123 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-97073 - Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Secu
NEAR-REAL-TIME
CVE-2026-97073 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-80069 - MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authen
NEAR-REAL-TIME
CVE-2026-80069 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
wordpress
Source ↗
MEDIUM
CVE-2026-80067 - MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Sub
NEAR-REAL-TIME
CVE-2026-80067 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
wordpress
Source ↗
MEDIUM
CVE-2026-54871 - Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder all
NEAR-REAL-TIME
CVE-2026-54871 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-54853 - Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configur
NEAR-REAL-TIME
CVE-2026-54853 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-54852 - Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Explo
NEAR-REAL-TIME
CVE-2026-54852 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
wordpress
Source ↗
MEDIUM
CVE-2026-52708 - Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured
NEAR-REAL-TIME
CVE-2026-52708 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-48884 - Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured
NEAR-REAL-TIME
CVE-2026-48884 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-42691 - Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-manage
NEAR-REAL-TIME
CVE-2026-42691 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-39742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell
NEAR-REAL-TIME
CVE-2026-39742 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-39737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem
NEAR-REAL-TIME
CVE-2026-39737 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-27063 - Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured
NEAR-REAL-TIME
CVE-2026-27063 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-27062 - Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery.
NEAR-REAL-TIME
CVE-2026-27062 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-25450 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf
NEAR-REAL-TIME
CVE-2026-25450 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗