Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
CRITICAL
CVE-2026-107015 - Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anot
NEAR-REAL-TIME
CVE-2026-107015 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107014 - Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read no
NEAR-REAL-TIME
CVE-2026-107014 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
CRITICAL
Hitachi Energy TRO600 series products
NEAR-REAL-TIME
CVE-2026-10756 · CISA - Cybersecurity Advisories · published 2026-10-29T15:01 · correlated from 2 sources
Source ↗
CRITICAL
Hitachi Energy CoreTec Product
NEAR-REAL-TIME
CVE-2026-13162 · CISA - Cybersecurity Advisories · published 2026-10-29T15:01 · correlated from 2 sources
Source ↗
HIGH
CVE-2026-115642 - keystonemiddleware: keystonemiddleware: application credential access_rules bypass via X-Service-Token header presence c
NEAR-REAL-TIME
CVE-2026-115642 · Red Hat - CVE Feed · published 2026-10-29T15:00 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-79589 - The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker
NEAR-REAL-TIME
CVE-2026-79589 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-54862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import a
NEAR-REAL-TIME
CVE-2026-54862 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-48202 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-b
NEAR-REAL-TIME
CVE-2026-48202 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-48195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste
NEAR-REAL-TIME
CVE-2026-48195 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-42707 - Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Inc
NEAR-REAL-TIME
CVE-2026-42707 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-39782 - Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access C
NEAR-REAL-TIME
CVE-2026-39782 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-39736 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi
NEAR-REAL-TIME
CVE-2026-39736 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-25467 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registrat
NEAR-REAL-TIME
CVE-2026-25467 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-119054 - Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Cont
NEAR-REAL-TIME
CVE-2026-119054 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-119053 - lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writ
NEAR-REAL-TIME
CVE-2026-119053 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-119052 - llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenti
NEAR-REAL-TIME
CVE-2026-119052 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-119051 - flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to cr
NEAR-REAL-TIME
CVE-2026-119051 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-119050 - Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary
NEAR-REAL-TIME
CVE-2026-119050 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
HIGH
CVE-2026-119049 - FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another us
NEAR-REAL-TIME
CVE-2026-119049 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-119048 - JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that
NEAR-REAL-TIME
CVE-2026-119048 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗