Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-113712 GHSA-x397-5hrv-j9m9 - Cachet has Stored XSS in Incident Component MEDIUM - cachethq cachethq/cachet Unknown 1 Details
CVE-2026-111762 GHSA-x32g-jvvm-4725 - A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure MEDIUM - org.a2aproject.sdk:a2a-java-sdk-transport-rest org.a2aproject.sdk:a2a-java-sdk-transport-rest Unknown 1 Details
CVE-2026-111765 GHSA-4fpj-g9jf-9rgg - A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix HIGH 7.5 org.a2aproject.sdk:a2a-java-sdk-http-client-android org.a2aproject.sdk:a2a-java-sdk-http-client-android Unknown 1 Details
CVE-2026-111761 GHSA-q78c-5jjq-57g8 - A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery MEDIUM 5.8 org.a2aproject.sdk:a2a-java-sdk-server-common org.a2aproject.sdk:a2a-java-sdk-server-common Unknown 1 Details
CVE-2026-111764 GHSA-qw47-mcm5-934w - A2A Java SDK has a fail-open default task authorization HIGH 7.5 org.a2aproject.sdk:a2a-java-sdk-server-common org.a2aproject.sdk:a2a-java-sdk-server-common Unknown 1 Details
CVE-2026-111763 GHSA-9rhm-2h4x-jwmx - A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect MEDIUM - org.a2aproject.sdk:a2a-java-sdk-parent org.a2aproject.sdk:a2a-java-sdk-parent Unknown 1 Details
CVE-2026-113314 CVE-2026-113314 - chromium-browser: chromium-browser: Use after free in Media HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113256 CVE-2026-113256 - chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113091 CVE-2026-113091 - chromium-browser: chromium-browser: Use after free in PerformanceAPIs HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113050 CVE-2026-113050 - chromium-browser: chromium-browser: Out of bounds read in HID MEDIUM 4.3 Red Hat Unknown 1 Details
CVE-2026-113203 CVE-2026-113203 - chromium-browser: chromium-browser: arbitrary code execution via use-after-free in CSS HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113041 CVE-2026-113041 - chromium-browser: chromium-browser: Arbitrary code execution inside sandbox via crafted HTML page HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113105 CVE-2026-113105 - chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113310 CVE-2026-113310 - chromium-browser: chromium-browser: Information disclosure in Bluetooth via crafted HTML page MEDIUM 4.3 Red Hat Unknown 1 Details
CVE-2026-113339 CVE-2026-113339 - chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in SVG HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-112899 GHSA-vx6w-vv9f-6gvg - Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit MEDIUM - Pillow Pillow Unknown 1 Details
CVE-2026-112403 GHSA-8g5g-8vmr-9782 - Pillow: Heap buffer overflow in ImagingJpegDecode CRITICAL - Pillow Pillow Unknown 1 Details
CVE-2026-111753 GHSA-jfgx-762w-99vr - @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) MEDIUM - @angular @angular/common Unknown 1 Details
- 2026-018: Critical Vulnerabilities in PHP CRITICAL - Unknown 1 Details
CVE-2026-111758 GHSA-gfr2-rv44-r23c - markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) HIGH 7.5 markdown-itRed Hat markdown-it Unknown 2 sources Details