Security Operations
Threat Intelligence
๐Ÿ”Ž
โ“

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-104674 CVE-2026-104674 - Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr MEDIUM 4.3 Unknown 1 Details
CVE-2026-59978 GHSA-jm85-8cpp-9cjc - AdminNeo: version-cache array injection causes persistent denial of service HIGH 7.5 adminneo-org adminneo-org/adminneo Unknown 2 sources Details
CVE-2026-9239 CVE-2026-9239 - The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label a MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-97638 CVE-2026-97638 - The Forminator Forms โ€“ Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-96894 CVE-2026-96894 - The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Si HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-76012 CVE-2026-76012 - The Photo Gallery, Sliders, Proofing and Themes โ€“ NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Exec HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-13747 CVE-2026-13747 - The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-119979 CVE-2026-119979 - LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that HIGH 8.8 Unknown 1 Details
CVE-2026-119978 CVE-2026-119978 - Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by HIGH 8.5 Unknown 1 Details
CVE-2026-119777 CVE-2026-119777 - A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream HIGH 7.8 Unknown 1 Details
CVE-2026-119764 CVE-2026-119764 - Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling ta MEDIUM 6.8 Unknown 1 Details
CVE-2026-119763 CVE-2026-119763 - changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attacker MEDIUM 5.3 Unknown 1 Details
CVE-2026-119762 CVE-2026-119762 - Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of HIGH 7.5 Unknown 1 Details
CVE-2026-119761 CVE-2026-119761 - Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows un MEDIUM 6.1 Unknown 1 Details
CVE-2026-119760 CVE-2026-119760 - sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthent HIGH 7.5 Unknown 1 Details
CVE-2026-119620 CVE-2026-119620 - A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. Thi HIGH 7.3 Unknown 1 Details
CVE-2026-119619 CVE-2026-119619 - A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This aff HIGH 7.3 Unknown 1 Details
CVE-2026-119176 CVE-2026-119176 - The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject' pa MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-119113 CVE-2026-119113 - The GeoDirectory โ€“ WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-119086 CVE-2026-119086 - Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enable MEDIUM 6.5 Unknown 1 Details