Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119546 CVE-2026-119546 - Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in res MEDIUM 5.5 Unknown 1 Details
CVE-2026-119545 CVE-2026-119545 - Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnera MEDIUM 5.3 Unknown 1 Details
CVE-2026-119429 CVE-2026-119429 - phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remov MEDIUM 4.3 Unknown 1 Details
CVE-2026-119428 CVE-2026-119428 - phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to t LOW 3.7 Unknown 1 Details
CVE-2026-119427 CVE-2026-119427 - phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated use MEDIUM 4.2 Unknown 1 Details
CVE-2026-119426 CVE-2026-119426 - phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arb HIGH 7.5 Unknown 1 Details
CVE-2026-119425 CVE-2026-119425 - OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming featur MEDIUM 5.4 Unknown 1 Details
CVE-2026-119424 CVE-2026-119424 - OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with w MEDIUM 6.8 Unknown 1 Details
CVE-2026-119423 CVE-2026-119423 - OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim MEDIUM 5.3 Unknown 1 Details
CVE-2026-119422 CVE-2026-119422 - Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers MEDIUM 5.9 Unknown 1 Details
CVE-2026-119421 CVE-2026-119421 - Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that MEDIUM 5.9 Unknown 1 Details
CVE-2026-119420 CVE-2026-119420 - Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain se HIGH 8.8 Unknown 1 Details
CVE-2026-119419 CVE-2026-119419 - CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidat HIGH 8.1 Unknown 1 Details
CVE-2026-119418 CVE-2026-119418 - CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidat HIGH 8.1 Unknown 1 Details
CVE-2026-119417 CVE-2026-119417 - CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email head LOW 3.7 Unknown 1 Details
CVE-2026-119416 CVE-2026-119416 - CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection th MEDIUM 4.8 Unknown 1 Details
CVE-2026-119415 CVE-2026-119415 - CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME par LOW 3.7 Unknown 1 Details
CVE-2026-119414 CVE-2026-119414 - Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allow MEDIUM 4.3 Unknown 1 Details
CVE-2026-119409 CVE-2026-119409 - OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmw HIGH 7.2 Unknown 1 Details
CVE-2026-119408 CVE-2026-119408 - n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via depreca HIGH 8.8 Unknown 1 Details