Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119597 CVE-2026-119597 - OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to CRITICAL 9.8 Unknown 1 Details
CVE-2026-119596 CVE-2026-119596 - UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authentic MEDIUM 4.3 Unknown 1 Details
CVE-2026-119578 CVE-2026-119578 - MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows a HIGH 7.8 Unknown 1 Details
CVE-2026-119577 CVE-2026-119577 - ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access thro MEDIUM 6.8 Unknown 1 Details
CVE-2026-119576 CVE-2026-119576 - ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readReco MEDIUM 4.3 Unknown 1 Details
CVE-2026-119575 CVE-2026-119575 - ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows authenticated users MEDIUM 6.5 Unknown 1 Details
CVE-2026-119574 CVE-2026-119574 - Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attacker MEDIUM 5.9 Unknown 1 Details
CVE-2026-119573 CVE-2026-119573 - Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cr MEDIUM 4.4 nginx Unknown 1 Details
CVE-2026-119572 CVE-2026-119572 - Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX pr HIGH 8.7 nginx Unknown 1 Details
CVE-2026-119571 CVE-2026-119571 - Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates address LOW 3.7 Unknown 1 Details
CVE-2026-119570 CVE-2026-119570 - Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to re LOW 3.1 Unknown 1 Details
CVE-2026-119569 CVE-2026-119569 - Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-co MEDIUM 5.3 Unknown 1 Details
CVE-2026-119528 CVE-2026-119528 - A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying HIGH 7.8 Unknown 1 Details
CVE-2026-118987 CVE-2026-118987 - CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cook INFORMATIONAL - Unknown 1 Details
CVE-2026-118986 CVE-2026-118986 - CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). Th INFORMATIONAL - Unknown 1 Details
CVE-2026-117350 CVE-2026-117350 - Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. INFORMATIONAL - Unknown 1 Details
CVE-2026-117028 CVE-2026-117028 - Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::che INFORMATIONAL - Unknown 1 Details
CVE-2026-115683 CVE-2026-115683 - A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany regist MEDIUM 6.8 Unknown 1 Details
CVE-2026-112348 CVE-2026-112348 - Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-112347 CVE-2026-112347 - Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API HIGH 7.6 wordpress Unknown 1 Details