Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-41022 CVE-2026-41022 - Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could expl MEDIUM 5.9 Unknown 1 Details
CVE-2026-41021 CVE-2026-41021 - Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through C HIGH 7.5 Unknown 1 Details
CVE-2026-41020 CVE-2026-41020 - Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to cap HIGH 7.5 Unknown 1 Details
CVE-2026-117499 CVE-2026-117499 - @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavi LOW 3.7 Unknown 1 Details
CVE-2026-115408 CVE-2026-115408 - In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions MEDIUM 5.5 Unknown 1 Details
CVE-2026-115216 CVE-2026-115216 - In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contac INFORMATIONAL - Unknown 1 Details
CVE-2026-113644 CVE-2026-113644 - In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certifi INFORMATIONAL - Unknown 1 Details
CVE-2026-112362 CVE-2026-112362 - @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when CRITICAL 9.1 Unknown 1 Details
CVE-2026-10752 CVE-2026-10752 - The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, a MEDIUM 4.8 wordpress Unknown 1 Details
CVE-2026-109995 CVE-2026-109995 - The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-106087 CVE-2026-106087 - TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read INFORMATIONAL - Unknown 1 Details
CVE-2026-105323 CVE-2026-105323 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and MEDIUM 6.1 Unknown 1 Details
CVE-2026-102800 CVE-2026-102800 - Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article INFORMATIONAL - Unknown 1 Details
- From industry concern to practical action: the value of working with regulators MEDIUM - Unknown 1 Details
CVE-2026-117627 CVE-2026-117627 - keycloak-services: keycloak-services: JWT Authorization Grant bypasses Identity Provider login restrictions MEDIUM 5.4 Red Hat Unknown 1 Details
CVE-2026-117541 CVE-2026-117541 - svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash calle MEDIUM 5.3 Unknown 1 Details
CVE-2026-117540 CVE-2026-117540 - svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedl HIGH 7.5 Unknown 1 Details
CVE-2026-117539 CVE-2026-117539 - darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow att LOW 3.5 Unknown 1 Details
CVE-2026-117538 CVE-2026-117538 - REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the func MEDIUM 4.1 Unknown 1 Details
CVE-2026-117537 CVE-2026-117537 - REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inje MEDIUM 4.1 Unknown 1 Details