Security Operations
Threat Intelligence
โ“
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119764 CVE-2026-119764 - Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling ta MEDIUM 6.8 Unknown 1 Details
CVE-2026-119763 CVE-2026-119763 - changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attacker MEDIUM 5.3 Unknown 1 Details
CVE-2026-119762 CVE-2026-119762 - Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of HIGH 7.5 Unknown 1 Details
CVE-2026-119761 CVE-2026-119761 - Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows un MEDIUM 6.1 Unknown 1 Details
CVE-2026-119760 CVE-2026-119760 - sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthent HIGH 7.5 Unknown 1 Details
CVE-2026-119620 CVE-2026-119620 - A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. Thi HIGH 7.3 Unknown 1 Details
CVE-2026-119619 CVE-2026-119619 - A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This aff HIGH 7.3 Unknown 1 Details
CVE-2026-119176 CVE-2026-119176 - The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject' pa MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-119113 CVE-2026-119113 - The GeoDirectory โ€“ WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-119086 CVE-2026-119086 - Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enable MEDIUM 6.5 Unknown 1 Details
CVE-2026-118697 CVE-2026-118697 - In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted CRITICAL 9.0 Unknown 1 Details
CVE-2026-118696 CVE-2026-118696 - In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2 HIGH 8.0 Unknown 1 Details
CVE-2026-118635 CVE-2026-118635 - The The GeoDirectory โ€“ WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-118205 CVE-2026-118205 - The Essential Addons for Elementor โ€“ Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privile HIGH 7.4 wordpress Unknown 1 Details
CVE-2026-116552 CVE-2026-116552 - The Like Button Rating โ™ฅ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_ MEDIUM 4.7 wordpress Unknown 1 Details
CVE-2026-115869 CVE-2026-115869 - The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater fiel MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-115820 CVE-2026-115820 - The Majestic Support โ€“ The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generi MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-115346 CVE-2026-115346 - The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in ve HIGH 8.1 wordpress Unknown 1 Details
CVE-2026-112365 CVE-2026-112365 - The easy.jobs โ€“ AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vu HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-110533 CVE-2026-110533 - The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_vide MEDIUM 6.4 wordpress Unknown 1 Details