Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-79589 CVE-2026-79589 - The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker INFORMATIONAL - Unknown 1 Details
CVE-2026-54862 CVE-2026-54862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import a MEDIUM 6.5 Unknown 1 Details
CVE-2026-48202 CVE-2026-48202 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-b MEDIUM 5.3 Unknown 1 Details
CVE-2026-48195 CVE-2026-48195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste MEDIUM 6.5 Unknown 1 Details
CVE-2026-42707 CVE-2026-42707 - Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Inc MEDIUM 4.3 Unknown 1 Details
CVE-2026-39782 CVE-2026-39782 - Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access C MEDIUM 5.3 Unknown 1 Details
CVE-2026-39736 CVE-2026-39736 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi HIGH 8.5 Unknown 1 Details
CVE-2026-25467 CVE-2026-25467 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registrat MEDIUM 5.3 Unknown 1 Details
CVE-2026-119054 CVE-2026-119054 - Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Cont MEDIUM 5.4 Unknown 1 Details
CVE-2026-119053 CVE-2026-119053 - lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writ MEDIUM 5.3 Unknown 1 Details
CVE-2026-119052 CVE-2026-119052 - llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenti HIGH 7.5 Unknown 1 Details
CVE-2026-119051 CVE-2026-119051 - flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to cr MEDIUM 5.9 Unknown 1 Details
CVE-2026-119050 CVE-2026-119050 - Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary HIGH 8.1 Unknown 1 Details
CVE-2026-119049 CVE-2026-119049 - FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another us HIGH 7.6 Unknown 1 Details
CVE-2026-119048 CVE-2026-119048 - JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that MEDIUM 4.2 Unknown 1 Details
CVE-2026-118425 CVE-2026-118425 - A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solut MEDIUM 6.8 Unknown 1 Details
CVE-2026-116857 CVE-2026-116857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar MEDIUM 6.5 Unknown 1 Details
CVE-2026-116402 CVE-2026-116402 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForm MEDIUM 5.3 Unknown 1 Details
CVE-2026-116399 CVE-2026-116399 - Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request For HIGH 8.8 Unknown 1 Details
CVE-2026-113697 CVE-2026-113697 - Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticate INFORMATIONAL - Unknown 1 Details