Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-102789 CVE-2026-102789 - Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorCon INFORMATIONAL - Unknown 1 Details
CVE-2026-102788 CVE-2026-102788 - Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the INFORMATIONAL - Unknown 1 Details
CVE-2026-102787 CVE-2026-102787 - Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 INFORMATIONAL - Unknown 1 Details
CVE-2026-92885 CVE-2026-92885 - The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versi CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-65213 CVE-2026-65213 - This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BM MEDIUM 6.6 Unknown 1 Details
CVE-2026-65211 CVE-2026-65211 - This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby exe HIGH 7.2 Unknown 1 Details
CVE-2026-65220 CVE-2026-65220 - A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate HIGH 8.8 Unknown 1 Details
CVE-2026-65219 CVE-2026-65219 - A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP mess HIGH 7.4 Unknown 1 Details
CVE-2026-65210 CVE-2026-65210 - This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing mat MEDIUM 4.9 Unknown 1 Details
CVE-2026-18451 CVE-2026-18451 - The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation m LOW 3.1 Unknown 1 Details
CVE-2026-18450 CVE-2026-18450 - The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c CRITICAL 9.8 Unknown 1 Details
CVE-2026-18449 CVE-2026-18449 - The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c HIGH 7.5 Unknown 1 Details
CVE-2026-16521 CVE-2026-16521 - An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command p HIGH 7.2 Unknown 1 Details
CVE-2026-111461 CVE-2026-111461 - An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabl INFORMATIONAL - Unknown 1 Details
CVE-2026-111460 CVE-2026-111460 - A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauth INFORMATIONAL - Unknown 1 Details
CVE-2026-111459 CVE-2026-111459 - An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditi INFORMATIONAL - Unknown 1 Details
CVE-2026-10511 CVE-2026-10511 - The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' para MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-107472 CVE-2026-107472 - An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Q INFORMATIONAL - Unknown 1 Details
CVE-2026-101034 CVE-2026-101034 - An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and INFORMATIONAL - Unknown 1 Details
CVE-2026-75891 CVE-2026-75891 - The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and HIGH 8.8 wordpress Unknown 1 Details