Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119338 CVE-2026-119338 - tesseract: tesseract: Denial of Service via crafted right-to-left text rendering MEDIUM 6.6 Red Hat Unknown 2 sources Details
CVE-2026-94175 CVE-2026-94175 - Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-90888 CVE-2026-90888 - Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-7005 CVE-2026-7005 - WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows at MEDIUM 6.1 Unknown 1 Details
CVE-2026-7004 CVE-2026-7004 - WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allow MEDIUM 6.1 Unknown 1 Details
CVE-2026-7003 CVE-2026-7003 - WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers MEDIUM 5.3 Unknown 1 Details
CVE-2026-78527 CVE-2026-78527 - Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-73322 CVE-2026-73322 - Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is e INFORMATIONAL - apache Unknown 1 Details
CVE-2026-73186 CVE-2026-73186 - Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-66026 CVE-2026-66026 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. INFORMATIONAL - Unknown 1 Details
CVE-2026-66025 CVE-2026-66025 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. INFORMATIONAL - Unknown 1 Details
CVE-2026-62331 CVE-2026-62331 - praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Contro HIGH 8.2 github github.com/mtzanidakis/praktor Unknown 2 sources Details
CVE-2026-62303 CVE-2026-62303 - Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResourc MEDIUM 5.9 Unknown 1 Details
CVE-2026-62298 CVE-2026-62298 - mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointe INFORMATIONAL - Unknown 1 Details
CVE-2026-62162 CVE-2026-62162 - Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/de INFORMATIONAL - Unknown 1 Details
CVE-2026-62122 CVE-2026-62122 - Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr MEDIUM 5.3 Unknown 1 Details
CVE-2026-62121 CVE-2026-62121 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MEDIUM 6.5 Unknown 1 Details
CVE-2026-62057 CVE-2026-62057 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact F MEDIUM 5.3 Unknown 1 Details
CVE-2026-62056 CVE-2026-62056 - Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-62047 CVE-2026-62047 - Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly MEDIUM 4.3 Unknown 1 Details