Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-75891 CVE-2026-75891 - The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-106174 CVE-2026-106174 - A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated att HIGH 7.5 fortinet Unknown 1 Details
CVE-2026-105946 CVE-2026-105946 - Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows rem INFORMATIONAL - Unknown 1 Details
CVE-2026-103359 CVE-2026-103359 - The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming pay MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-103325 CVE-2026-103325 - The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payme LOW 3.7 wordpress Unknown 1 Details
CVE-2026-62765 CVE-2026-62765 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability LOW - Unknown 1 Details
CVE-2026-96196 CVE-2026-96196 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability LOW - Unknown 1 Details
CVE-2026-88078 CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing Vulnerability MEDIUM - Unknown 1 Details
CVE-2026-20942 CVE-2026-20942 Microsoft Edge (Chromium-based) Spoofing Vulnerability LOW - Unknown 1 Details
CVE-2026-110910 CVE-2026-110910 - qs: qs: Query parameter injection via unencoded empty array keys LOW 3.7 Red Hat Unknown 2 sources Details
CVE-2026-117472 CVE-2026-117472 - Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a h MEDIUM 4.3 Unknown 1 Details
CVE-2026-117471 CVE-2026-117471 - Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo devic MEDIUM 5.4 oracle Unknown 1 Details
CVE-2026-117470 CVE-2026-117470 - Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verificati MEDIUM 6.5 Unknown 1 Details
CVE-2026-117469 CVE-2026-117469 - Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-r MEDIUM 5.4 Unknown 1 Details
CVE-2026-117468 CVE-2026-117468 - Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a MEDIUM 6.5 Unknown 1 Details
CVE-2026-111820 CVE-2026-111820 - The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Sit HIGH 7.2 wordpressgoogle Unknown 1 Details
CVE-2026-103332 CVE-2026-103332 - The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of i MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-103312 CVE-2026-103312 - The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifi MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-88781 CVE-2026-88781 - Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an INFORMATIONAL - Unknown 1 Details
CVE-2026-116640 CVE-2026-116640 - A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8 LOW 3.5 Unknown 1 Details