Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-111770 GHSA-jm63-cq47-j5jp - MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another HIGH 7.7 @modelcontextprotocol @modelcontextprotocol/server Unknown 1 Details
CVE-2026-111768 GHSA-46jr-4wx8-v453 - MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation HIGH 7.5 @modelcontextprotocol @modelcontextprotocol/sdk@modelcontextprotocol/server Unknown 1 Details
CVE-2026-113725 CVE-2026-113725 - virtualenv: virtualenv: arbitrary code execution via crafted environment name HIGH 7.8 Red Hat Unknown 1 Details
CVE-2026-113724 CVE-2026-113724 - virtualenv: virtualenv: Insecure file permission modification via symlink following MEDIUM 4.5 Red Hat Unknown 1 Details
CVE-2026-112944 GHSA-r825-w8mm-5pxw - launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors MEDIUM - launch-editorvite launch-editorvite Unknown 2 sources Details
CVE-2026-113723 CVE-2026-113723 - virtualenv: virtualenv: Arbitrary code execution via malicious prompt text HIGH 7.8 Red Hat Unknown 1 Details
CVE-2026-113722 CVE-2026-113722 - virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers HIGH 7.8 Red Hat Unknown 1 Details
CVE-2026-112942 GHSA-587h-7wmj-h5pm - launch-editor: `fs.existsSync()` existence check can be bypassed on Windows HIGH - launch-editorvite launch-editorvite Unknown 2 sources Details
CVE-2026-113721 CVE-2026-113721 - virtualenv: virtualenv: Arbitrary file overwrite via insecure symlink handling MEDIUM 4.5 Red Hat Unknown 1 Details
CVE-2026-111771 GHSA-rvq5-wwqv-78pq - MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service MEDIUM 6.8 @modelcontextprotocol @modelcontextprotocol/sdk@modelcontextprotocol/server Unknown 1 Details
CVE-2026-113720 CVE-2026-113720 - virtualenv: virtualenv: Arbitrary code execution via insecure cached file permissions MEDIUM 6.7 Red Hat Unknown 1 Details
CVE-2026-113715 CVE-2026-113715 - virtualenv: virtualenv: Environment isolation bypass via crafted destination path MEDIUM 4.5 Red Hat Unknown 1 Details
CVE-2026-113719 CVE-2026-113719 - virtualenv: virtualenv: Arbitrary file deletion via path traversal in package metadata MEDIUM 4.5 Red Hat Unknown 1 Details
CVE-2026-113718 CVE-2026-113718 - virtualenv: virtualenv: arbitrary code execution via improper quoting in xonsh activation scripts MEDIUM 7.0 Red Hat Unknown 1 Details
- GHSA-hq85-5cpj-mr62 - uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised CRITICAL - uv uv Unknown 1 Details
- GHSA-6q48-6c7w-9gw2 - certifi bundles emSign root CAs with compromised intermediate CA keys CRITICAL - certifi certifi Unknown 1 Details
CVE-2026-113717 CVE-2026-113717 - virtualenv: virtualenv: Integrity verification bypass via pip seeder download option MEDIUM 5.0 Red Hat Unknown 1 Details
CVE-2026-113716 CVE-2026-113716 - virtualenv: virtualenv: Unauthorized file write via symlink following MEDIUM 4.5 Red Hat Unknown 1 Details
CVE-2026-113868 CVE-2026-113868 - thunderbird: Thunderbird: information disclosure via malformed authentication challenge MEDIUM 5.4 Red Hat Unknown 1 Details
CVE-2026-113869 CVE-2026-113869 - thunderbird: thunderbird: Use-after-free via S/MIME decryption password prompt HIGH 8.8 Red Hat Unknown 1 Details