Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-63393 CVE-2026-63393 - OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 u INFORMATIONAL - Unknown 1 Details
CVE-2026-63378 CVE-2026-63378 - TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language HIGH 8.8 Unknown 1 Details
CVE-2026-63377 CVE-2026-63377 - TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language CRITICAL 9.8 Unknown 1 Details
CVE-2026-63346 CVE-2026-63346 - Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter nam INFORMATIONAL - Unknown 1 Details
CVE-2026-63345 CVE-2026-63345 - Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object k INFORMATIONAL - Unknown 1 Details
CVE-2026-63344 CVE-2026-63344 - Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the INFORMATIONAL - Unknown 1 Details
CVE-2026-63341 CVE-2026-63341 - Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the MQTT broker does not bound topic depth or HIGH 7.5 Unknown 1 Details
CVE-2026-63339 CVE-2026-63339 - IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica HIGH 8.8 Unknown 1 Details
CVE-2026-63338 CVE-2026-63338 - IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica HIGH 8.3 Unknown 1 Details
CVE-2026-61725 CVE-2026-61725 - sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z arch MEDIUM 6.1 Unknown 1 Details
CVE-2026-111477 CVE-2026-111477 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. INFORMATIONAL - Unknown 1 Details
CVE-2026-118761 GHSA-8fmv-6rg5-5924 - Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory HIGH 7.5 github github.com/kubeflow/pipelines Unknown 2 sources Details
CVE-2026-118759 GHSA-wg5q-x4j9-qm54 - Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs HIGH 7.5 github github.com/kubeflow/pipelines Unknown 2 sources Details
CVE-2026-119202 GHSA-8494-f6mr-cjpv - @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service HIGH 7.5 @hapicontent @hapi/contentcontent Unknown 2 sources Details
CVE-2026-119197 GHSA-mm57-4v3p-rchx - pyasn1 has quadratic-complexity denial of service in binary REAL decoding HIGH 7.5 pyasn1Red Hat pyasn1 Unknown 3 sources Details
CVE-2026-118775 GHSA-4642-5mcj-2rqw - Forge: ASN.1 OID first arc truncation in asn1.oidToDer LOW 3.7 node-forge node-forge Unknown 2 sources Details
CVE-2026-118777 GHSA-6wvx-3r32-xmcg - Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie MEDIUM 4.8 node-forge node-forge Unknown 2 sources Details
CVE-2026-118779 GHSA-7wch-p9px-956x - Forge: Regular expression denial of service in PEM decoding (pem.decode) HIGH 7.5 node-forge node-forge Unknown 2 sources Details
CVE-2026-118781 GHSA-h6cr-wjv9-3cpp - Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) LOW 2.9 node-forge node-forge Unknown 2 sources Details
CVE-2026-118780 GHSA-4487-j8r4-4g2f - Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store LOW 3.7 node-forge node-forge Unknown 2 sources Details