Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-115711 - Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E
Source ↗
CVE-2026-115711 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
HIGH
CVE-2026-115709 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un
Source ↗
CVE-2026-115709 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
HIGH
CVE-2026-115708 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to au
Source ↗
CVE-2026-115708 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-115707 - Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E
Source ↗
CVE-2026-115707 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-115706 - Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escal
Source ↗
CVE-2026-115706 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-115610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Publi
Source ↗
CVE-2026-115610 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-115605 - Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
Source ↗
CVE-2026-115605 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-115601 - Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiti
Source ↗
CVE-2026-115601 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-114706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te
Source ↗
CVE-2026-114706 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-114181 - Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager al
Source ↗
CVE-2026-114181 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-110881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S
Source ↗
CVE-2026-110881 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
INFORMATIONAL
CVE-2026-107024 - Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite anot
Source ↗
CVE-2026-107024 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
MEDIUM
CVE-2026-107023 - Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrari
Source ↗
CVE-2026-107023 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
INFORMATIONAL
CVE-2026-107021 - Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows u
Source ↗
CVE-2026-107021 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
HIGH
CVE-2026-107020 - An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers
Source ↗
CVE-2026-107020 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
INFORMATIONAL
CVE-2026-107019 - Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthori
Source ↗
CVE-2026-107019 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
INFORMATIONAL
CVE-2026-107018 - Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read a
Source ↗
CVE-2026-107018 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
CRITICAL
CVE-2026-107017 - Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers t
Source ↗
CVE-2026-107017 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
INFORMATIONAL
CVE-2026-107016 - Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.
Source ↗
CVE-2026-107016 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
CRITICAL
CVE-2026-107015 - Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anot
Source ↗
CVE-2026-107015 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T15:17