Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-111578 CVE-2026-111578 - The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape sev HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-118938 CVE-2026-118938 - fickling: fickling: Arbitrary code execution via safety analysis bypass for dotted attribute paths HIGH 7.8 Red Hat Unknown 2 sources Details
CVE-2026-62991 CVE-2026-62991 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/customers/{user}/show` MEDIUM 6.5 Unknown 1 Details
CVE-2026-62990 CVE-2026-62990 - Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 HIGH 8.7 Unknown 1 Details
CVE-2026-62989 CVE-2026-62989 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/admin/src/Li HIGH 8.1 Unknown 1 Details
CVE-2026-62979 CVE-2026-62979 - jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handl INFORMATIONAL - Unknown 1 Details
CVE-2026-62968 CVE-2026-62968 - Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input INFORMATIONAL - Unknown 1 Details
CVE-2026-62967 CVE-2026-62967 - ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenti HIGH 8.1 Unknown 1 Details
CVE-2026-62966 CVE-2026-62966 - ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to v HIGH 7.5 Unknown 1 Details
CVE-2026-62965 CVE-2026-62965 - SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in `sabnzbd/api.py` INFORMATIONAL - Unknown 1 Details
CVE-2026-62958 CVE-2026-62958 - libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host HIGH 7.9 linux Unknown 1 Details
CVE-2026-62864 CVE-2026-62864 - Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-nested-para HIGH 7.5 Unknown 1 Details
CVE-2026-62863 CVE-2026-62863 - MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its CRITICAL 9.6 Unknown 1 Details
CVE-2026-62860 CVE-2026-62860 - Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the `/api/auth/login` endpoint MEDIUM 5.3 Unknown 1 Details
CVE-2026-62853 CVE-2026-62853 - ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-s CRITICAL 9.9 Unknown 1 Details
CVE-2026-62849 CVE-2026-62849 - ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengin CRITICAL 9.1 Unknown 1 Details
CVE-2026-62848 CVE-2026-62848 - Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 202 HIGH 7.3 Metalama.Framework Metalama.Framework Unknown 2 sources Details
CVE-2026-62300 CVE-2026-62300 - Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up MEDIUM 6.5 filecoin-pin filecoin-pin Unknown 2 sources Details
CVE-2026-62297 CVE-2026-62297 - ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation HIGH 7.5 Unknown 1 Details
CVE-2026-62254 CVE-2026-62254 - LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger a MEDIUM 5.5 Unknown 1 Details