Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119702 CVE-2026-119702 - WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation that allows unauthe MEDIUM 6.5 Unknown 1 Details
CVE-2026-119701 CVE-2026-119701 - WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated attackers to flood pa MEDIUM 5.3 Unknown 1 Details
CVE-2026-119700 CVE-2026-119700 - WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determ MEDIUM 5.3 Unknown 1 Details
CVE-2026-119699 CVE-2026-119699 - WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticat MEDIUM 5.3 Unknown 1 Details
CVE-2026-119479 CVE-2026-119479 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder MEDIUM 5.3 Unknown 1 Details
CVE-2026-119369 CVE-2026-119369 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell MEDIUM 6.5 Unknown 1 Details
CVE-2026-119291 CVE-2026-119291 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect s MEDIUM 5.5 Unknown 1 Details
CVE-2026-119290 CVE-2026-119290 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered repor HIGH 7.5 Unknown 1 Details
CVE-2026-119289 CVE-2026-119289 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) HIGH 7.1 Unknown 1 Details
CVE-2026-119288 CVE-2026-119288 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Win HIGH 7.0 Unknown 1 Details
CVE-2026-119287 CVE-2026-119287 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode HIGH 8.0 Unknown 1 Details
CVE-2026-118238 CVE-2026-118238 - The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due HIGH 7.2 Unknown 1 Details
CVE-2026-117184 CVE-2026-117184 - An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a craft INFORMATIONAL - Unknown 1 Details
CVE-2026-117183 CVE-2026-117183 - A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the INFORMATIONAL - Unknown 1 Details
CVE-2026-117182 CVE-2026-117182 - An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 all INFORMATIONAL - Unknown 1 Details
CVE-2026-116407 CVE-2026-116407 - Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf MEDIUM 5.4 Unknown 1 Details
CVE-2026-105456 CVE-2026-105456 - RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link tha INFORMATIONAL - Unknown 1 Details
CVE-2026-105455 CVE-2026-105455 - RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an inciden INFORMATIONAL - Unknown 1 Details
CVE-2026-105454 CVE-2026-105454 - RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A INFORMATIONAL - Unknown 1 Details
CVE-2026-104615 CVE-2026-104615 - A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12 HIGH 7.9 Unknown 1 Details