Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-114042 CVE-2026-114042 - freerdp: FreeRDP: use-after-free in drdynvc virtual channel PDU handling MEDIUM 6.5 Red Hat Unknown 1 Details
CVE-2026-114043 CVE-2026-114043 - freerdp: FreeRDP: heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis MEDIUM 6.5 Red Hat Unknown 1 Details
CVE-2026-114041 CVE-2026-114041 - freerdp: FreeRDP: Windows RD Gateway consent message heap out-of-bounds read MEDIUM 6.5 Red Hat Unknown 1 Details
CVE-2026-114236 CVE-2026-114236 - podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers LOW 3.3 Red Hat Unknown 1 Details
CVE-2026-114038 CVE-2026-114038 - device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format string MEDIUM 5.1 Red Hat Unknown 1 Details
CVE-2026-113726 CVE-2026-113726 - virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh HIGH 7.8 Red Hatvirtualenv virtualenv Unknown 2 sources Details
CVE-2026-113776 CVE-2026-113776 - virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates HIGH 7.8 Red Hatvirtualenv virtualenv Unknown 2 sources Details
CVE-2026-113732 CVE-2026-113732 - virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts HIGH 7.8 Red Hatvirtualenv virtualenv Unknown 2 sources Details
CVE-2026-111879 CVE-2026-111879 - perl-DBI: perl-DBI: Denial of Service via unreleased table lock on error MEDIUM 5.5 Red Hat Unknown 1 Details
CVE-2026-108518 CVE-2026-108518 - perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profile MEDIUM 4.7 Red Hat Unknown 1 Details
CVE-2026-113712 GHSA-x397-5hrv-j9m9 - Cachet has Stored XSS in Incident Component MEDIUM - cachethq cachethq/cachet Unknown 1 Details
CVE-2026-111762 GHSA-x32g-jvvm-4725 - A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure MEDIUM - org.a2aproject.sdk:a2a-java-sdk-transport-rest org.a2aproject.sdk:a2a-java-sdk-transport-rest Unknown 1 Details
CVE-2026-111765 GHSA-4fpj-g9jf-9rgg - A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix HIGH 7.5 org.a2aproject.sdk:a2a-java-sdk-http-client-android org.a2aproject.sdk:a2a-java-sdk-http-client-android Unknown 1 Details
CVE-2026-113812 CVE-2026-113812 - perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates HIGH 7.4 Red Hat Unknown 1 Details
CVE-2026-111761 GHSA-q78c-5jjq-57g8 - A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery MEDIUM 5.8 org.a2aproject.sdk:a2a-java-sdk-server-common org.a2aproject.sdk:a2a-java-sdk-server-common Unknown 1 Details
CVE-2026-111764 GHSA-qw47-mcm5-934w - A2A Java SDK has a fail-open default task authorization HIGH 7.5 org.a2aproject.sdk:a2a-java-sdk-server-common org.a2aproject.sdk:a2a-java-sdk-server-common Unknown 1 Details
CVE-2026-111763 GHSA-9rhm-2h4x-jwmx - A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect MEDIUM - org.a2aproject.sdk:a2a-java-sdk-parent org.a2aproject.sdk:a2a-java-sdk-parent Unknown 1 Details
CVE-2026-113274 CVE-2026-113274 - chromium-browser: chromium-browser: Use after free in ReadingMode HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113039 CVE-2026-113039 - chromium-browser: chromium-browser: Use after free in Bookmarks HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113130 CVE-2026-113130 - chromium-browser: chromium-browser: Use after free in Actor HIGH 8.8 Red Hat Unknown 1 Details