Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-97860 CVE-2026-97860 - YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who h MEDIUM 6.7 Unknown 1 Details
CVE-2026-97854 CVE-2026-97854 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitra CRITICAL 9.8 Unknown 1 Details
CVE-2026-96767 CVE-2026-96767 - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-92086 CVE-2026-92086 - The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-5702 CVE-2026-5702 - Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticat INFORMATIONAL - Unknown 1 Details
CVE-2026-5700 CVE-2026-5700 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-5699 CVE-2026-5699 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-5698 CVE-2026-5698 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-5697 CVE-2026-5697 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-27401 CVE-2026-27401 - Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-fo MEDIUM 5.3 Unknown 1 Details
CVE-2026-119028 CVE-2026-119028 - oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by suppl HIGH 8.8 Unknown 1 Details
CVE-2026-119027 CVE-2026-119027 - oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by suppl HIGH 7.5 Unknown 1 Details
CVE-2026-119025 CVE-2026-119025 - open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code HIGH 7.5 Unknown 1 Details
CVE-2026-115821 CVE-2026-115821 - The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_la HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-110184 CVE-2026-110184 - The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, a HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-109822 CVE-2026-109822 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive in MEDIUM 6.5 Unknown 1 Details
CVE-2026-109216 CVE-2026-109216 - The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th MEDIUM 4.9 wordpress Unknown 1 Details
CVE-2026-103665 CVE-2026-103665 - The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari HIGH 7.8 Unknown 1 Details
CVE-2026-91920 CVE-2026-91920 - undertow: undertow: ChunkReader message length permits chunk-size overflow MEDIUM 6.5 Red Hat Unknown 2 sources Details
CVE-2026-71569 CVE-2026-71569 - Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from MEDIUM 4.8 apachegoogle Unknown 1 Details