Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119566 CVE-2026-119566 - Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google I MEDIUM 4.8 googleazure Unknown 1 Details
CVE-2026-119565 CVE-2026-119565 - Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that al MEDIUM 4.3 Unknown 1 Details
CVE-2026-119564 CVE-2026-119564 - Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site edit MEDIUM 5.3 Unknown 1 Details
CVE-2026-119563 CVE-2026-119563 - phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE pri MEDIUM 5.4 Unknown 1 Details
CVE-2026-119562 CVE-2026-119562 - phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supply MEDIUM 4.2 Unknown 1 Details
CVE-2026-119561 CVE-2026-119561 - phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionRespo MEDIUM 6.8 Unknown 1 Details
CVE-2026-119560 CVE-2026-119560 - OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append MEDIUM 5.9 Unknown 1 Details
CVE-2026-119559 CVE-2026-119559 - OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote attackers MEDIUM 5.9 Unknown 1 Details
CVE-2026-119558 CVE-2026-119558 - OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-pr LOW 3.1 Unknown 1 Details
CVE-2026-119557 CVE-2026-119557 - n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticate MEDIUM 5.9 Unknown 1 Details
CVE-2026-119556 CVE-2026-119556 - Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing MEDIUM 4.3 Unknown 1 Details
CVE-2026-119555 CVE-2026-119555 - Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an inform MEDIUM 4.3 Unknown 1 Details
CVE-2026-119554 CVE-2026-119554 - Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injectio MEDIUM 5.9 Unknown 1 Details
CVE-2026-119553 CVE-2026-119553 - Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path travers MEDIUM 6.5 Unknown 1 Details
CVE-2026-119552 CVE-2026-119552 - Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unauthenticated MEDIUM 4.8 Unknown 1 Details
CVE-2026-119551 CVE-2026-119551 - Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allows MEDIUM 6.5 Unknown 1 Details
CVE-2026-119550 CVE-2026-119550 - Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows au LOW 3.5 Unknown 1 Details
CVE-2026-119549 CVE-2026-119549 - Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass SvgSecur HIGH 7.1 Unknown 1 Details
CVE-2026-119548 CVE-2026-119548 - Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows user LOW 3.1 Unknown 1 Details
CVE-2026-119547 CVE-2026-119547 - Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure vulnerabili MEDIUM 4.3 Unknown 1 Details