Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-114607 CVE-2026-114607 - Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments t CRITICAL 9.1 Unknown 1 Details
CVE-2026-114606 CVE-2026-114606 - draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary l INFORMATIONAL - Unknown 1 Details
CVE-2026-104068 CVE-2026-104068 - JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows HIGH 7.2 wordpress Unknown 1 Details
- GHSA-78g4-xqwv-q3g8 - Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load() HIGH 8.1 pillow pillow Unknown 1 Details
CVE-2026-114132 GHSA-vjh5-4x84-xrqp - Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive MEDIUM - nuxt@nuxt nuxt@nuxt/nitro-server Unknown 2 sources Details
CVE-2026-114133 GHSA-xfq5-w38q-pc2x - Nuxt server islands render `useHeadSafe` input without sanitisation MEDIUM 5.4 nuxt nuxt Unknown 2 sources Details
CVE-2026-114130 GHSA-jjm6-p2m9-9w4x - Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled LOW - nuxt nuxt Unknown 2 sources Details
CVE-2026-114131 GHSA-6gq8-jgmh-3ffp - Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes MEDIUM 6.5 nuxt nuxt Unknown 2 sources Details
CVE-2026-114608 CVE-2026-114608 - pylint: pylint: Arbitrary code execution via untrusted cache deserialization MEDIUM 6.7 Red Hat Unknown 2 sources Details
CVE-2026-113796 GHSA-2p8c-gr87-2676 - Electron: SameSite cookie restrictions are not applied to windows opened from links MEDIUM 4.2 electron electron Unknown 2 sources Details
CVE-2026-113798 GHSA-x562-297c-g43g - Electron: Pointer lock permission requests can be attributed to the wrong frame MEDIUM 5.4 electron electron Unknown 2 sources Details
CVE-2026-113797 GHSA-98mx-cjp9-gchm - Electron: Extension tabs.query returns tab URLs and titles without the tabs permission LOW 3.1 electron electron Unknown 2 sources Details
CVE-2026-114122 GHSA-3qxv-5xgr-q7w9 - Electron: Frame subscription trusts GPU-supplied frame geometry LOW 3.9 electron electron Unknown 2 sources Details
CVE-2026-114124 GHSA-h3v5-h239-pg29 - Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry LOW 3.9 electron electron Unknown 2 sources Details
CVE-2026-114121 GHSA-997q-gvvc-jwmx - Electron: openExternal permission requests can be attributed to the wrong origin MEDIUM 5.4 electron electron Unknown 2 sources Details
- GHSA-673q-mjm6-r5xr - Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays CRITICAL - next next Unknown 1 Details
CVE-2026-114142 GHSA-h895-cgqg-jf52 - toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype HIGH - tome tome Unknown 2 sources Details
CVE-2026-97631 CVE-2026-97631 - edk2: Pre-boot RCE in EDK II PXE driver CRITICAL 8.8 Red Hat Unknown 2 sources Details
CVE-2026-114604 GHSA-c4qx-w738-7hr3 - GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments HIGH - @graphql-tools @graphql-tools/utils Unknown 1 Details
CVE-2026-75508 GHSA-r77w-qph3-7vf8 - GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit HIGH 7.5 graphql-coreRed Hat graphql-core Unknown 3 sources Details