Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-116958 CVE-2026-116958 - konflux-ci: Unquoted Variable Expansion in Shell Command Execution MEDIUM 6.7 Red Hat Unknown 2 sources Details
CVE-2026-118527 CVE-2026-118527 - Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability (known exploited) CRITICAL - ivanti Connect Secure KEV EXPLOITED 2 sources Details
CVE-2026-92744 CVE-2026-92744 - Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as INFORMATIONAL - Unknown 1 Details
CVE-2026-112211 CVE-2026-112211 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. INFORMATIONAL - Unknown 1 Details
CVE-2026-107239 CVE-2026-107239 - A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (R INFORMATIONAL - microsoft Unknown 1 Details
CVE-2026-107238 CVE-2026-107238 - A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account INFORMATIONAL - microsoft Unknown 1 Details
CVE-2023-22793 CVE-2023-22793 - A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam INFORMATIONAL - microsoft Unknown 1 Details
CVE-2026-61719 CVE-2026-61719 - WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in `saud HIGH 8.9 Unknown 1 Details
CVE-2026-61707 CVE-2026-61707 - SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, CRITICAL 9.0 Unknown 1 Details
CVE-2026-61673 CVE-2026-61673 - WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in ` INFORMATIONAL - Unknown 1 Details
CVE-2026-61671 CVE-2026-61671 - WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controle HIGH 8.1 Unknown 1 Details
CVE-2026-61654 CVE-2026-61654 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook INFORMATIONAL - Unknown 1 Details
CVE-2026-61645 CVE-2026-61645 - Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul CRITICAL 9.1 Unknown 1 Details
CVE-2026-45049 CVE-2026-45049 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`C HIGH 8.3 Unknown 1 Details
CVE-2026-119317 CVE-2026-119317 - On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the MEDIUM 6.5 linux Unknown 1 Details
CVE-2026-115943 CVE-2026-115943 - Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce INFORMATIONAL - Unknown 1 Details
CVE-2026-119286 CVE-2026-119286 - graphql-core: graphql-core: Denial of Service via unbounded memory growth during document validation HIGH 7.5 Red Hatgraphql-core graphql-core Unknown 3 sources Details
CVE-2026-119284 CVE-2026-119284 - joserfc: joserfc: Denial of Service via excessive memory allocation during JWS deserialization MEDIUM 5.3 Red Hatjoserfc joserfc Unknown 3 sources Details
CVE-2026-61576 CVE-2026-61576 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook INFORMATIONAL - Unknown 1 Details
CVE-2026-13303 CVE-2026-13303 - HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store HIGH 8.7 Unknown 1 Details