Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-84170 CVE-2026-84170 - Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resour INFORMATIONAL - apache Unknown 1 Details
CVE-2026-83594 CVE-2026-83594 - Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.Fil INFORMATIONAL - apache Unknown 1 Details
CVE-2026-83559 CVE-2026-83559 - Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuot INFORMATIONAL - apache Unknown 1 Details
CVE-2026-83539 CVE-2026-83539 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html. INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82956 CVE-2026-82956 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ajax.AjaxNewWindowNotif INFORMATIONAL - apache Unknown 1 Details
CVE-2026-120275 CVE-2026-120275 - A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part MEDIUM 5.5 Unknown 1 Details
CVE-2026-111089 CVE-2026-111089 - Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes som INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82898 CVE-2026-82898 - Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListe INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82840 CVE-2026-82840 - Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authentica INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82705 CVE-2026-82705 - Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAutho INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82704 CVE-2026-82704 - Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.ListenerRequestHandler invokes an IReque INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82559 CVE-2026-82559 - Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocketRequest() INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82558 CVE-2026-82558 - Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wicket's nat INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82557 CVE-2026-82557 - Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a INFORMATIONAL - apache Unknown 1 Details
CVE-2026-82115 CVE-2026-82115 - Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, the request INFORMATIONAL - apache Unknown 1 Details
CVE-2026-120274 CVE-2026-120274 - A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of th MEDIUM 4.7 Unknown 1 Details
CVE-2026-120242 CVE-2026-120242 - A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1 LOW 2.4 Unknown 1 Details
CVE-2026-120241 CVE-2026-120241 - A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1) HIGH 7.5 Unknown 1 Details
CVE-2026-120240 CVE-2026-120240 - A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the fil CRITICAL 9.9 Unknown 1 Details
CVE-2026-120239 CVE-2026-120239 - A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the CRITICAL 9.9 Unknown 1 Details