Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-117635 CVE-2026-117635 - The `/api/v1/admin` route group did not enforce the `public-only` restriction of personal access tokens. A public-only t INFORMATIONAL - Unknown 1 Details
CVE-2026-116474 CVE-2026-116474 - The `GITEA_TOKEN` of a Gitea Actions job authenticates as the `gitea-actions` system user, and the `/api/v1/user` email INFORMATIONAL - Unknown 1 Details
CVE-2026-116296 CVE-2026-116296 - The API routes for releases, release assets, milestones and repository labels did not reject changes to archived reposit INFORMATIONAL - Unknown 1 Details
CVE-2026-116289 CVE-2026-116289 - Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions r INFORMATIONAL - Unknown 1 Details
CVE-2026-114199 CVE-2026-114199 - `GET /api/v1/users/{username}/heatmap` computed the contribution heatmap with the repository access of the token owner a INFORMATIONAL - Unknown 1 Details
CVE-2026-113429 CVE-2026-113429 - Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that i INFORMATIONAL - Unknown 1 Details
CVE-2026-112887 CVE-2026-112887 - Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, org INFORMATIONAL - Unknown 1 Details
CVE-2026-120218 CVE-2026-120218 - A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of th LOW 3.5 Unknown 1 Details
CVE-2026-120217 CVE-2026-120217 - loguru: loguru: Denial of Service via inefficient regular expression complexity MEDIUM 4.3 Red Hat Unknown 2 sources Details
CVE-2026-120198 CVE-2026-120198 - A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the f CRITICAL 10.0 Unknown 1 Details
CVE-2026-118168 CVE-2026-118168 - The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler render MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-113482 CVE-2026-113482 - The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputti MEDIUM 6.8 wordpress Unknown 1 Details
CVE-2026-113481 CVE-2026-113481 - The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a po MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-107343 CVE-2026-107343 - The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-107342 CVE-2026-107342 - The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-120197 CVE-2026-120197 - A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wap CRITICAL 9.9 Unknown 1 Details
CVE-2026-120196 CVE-2026-120196 - A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/w CRITICAL 9.9 Unknown 1 Details
CVE-2026-120195 CVE-2026-120195 - A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the funct CRITICAL 10.0 Unknown 1 Details
CVE-2026-120192 CVE-2026-120192 - A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app MEDIUM 5.3 Unknown 1 Details
CVE-2026-120252 CVE-2026-120252 - imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Defin MEDIUM 5.5 Red Hat Unknown 2 sources Details