Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-117536 CVE-2026-117536 - REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/ HIGH 8.8 Unknown 1 Details
CVE-2026-117535 CVE-2026-117535 - REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, wher MEDIUM 6.1 Unknown 1 Details
CVE-2026-117534 CVE-2026-117534 - REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows att MEDIUM 5.4 Unknown 1 Details
CVE-2026-117533 CVE-2026-117533 - REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves up MEDIUM 4.4 Unknown 1 Details
CVE-2026-117532 CVE-2026-117532 - REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin tha CRITICAL 9.8 Unknown 1 Details
CVE-2026-117530 CVE-2026-117530 - In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted command MEDIUM 6.7 Unknown 1 Details
CVE-2026-117466 CVE-2026-117466 - In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full s INFORMATIONAL - Unknown 1 Details
CVE-2026-117341 CVE-2026-117341 - In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. Wh INFORMATIONAL - Unknown 1 Details
CVE-2026-116900 CVE-2026-116900 - REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by MEDIUM 5.4 Unknown 1 Details
CVE-2026-116899 CVE-2026-116899 - REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices i MEDIUM 6.5 Unknown 1 Details
CVE-2026-116898 CVE-2026-116898 - REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target HIGH 7.1 Unknown 1 Details
CVE-2026-116897 CVE-2026-116897 - REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history MEDIUM 6.5 Unknown 1 Details
CVE-2026-116896 CVE-2026-116896 - REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database HIGH 7.5 Unknown 1 Details
CVE-2026-116895 CVE-2026-116895 - REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET MEDIUM 5.4 Unknown 1 Details
CVE-2026-116894 CVE-2026-116894 - REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account a MEDIUM 4.2 Unknown 1 Details
CVE-2026-116893 CVE-2026-116893 - REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets n MEDIUM 6.8 Unknown 1 Details
CVE-2026-116892 CVE-2026-116892 - SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenti MEDIUM 6.1 Unknown 1 Details
CVE-2026-116891 CVE-2026-116891 - SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenti MEDIUM 6.1 Unknown 1 Details
CVE-2026-116890 CVE-2026-116890 - Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module HIGH 7.3 Unknown 1 Details
CVE-2026-116889 CVE-2026-116889 - SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with pa MEDIUM 6.1 Unknown 1 Details