Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-116387 CVE-2026-116387 - Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Acc MEDIUM 5.3 Unknown 1 Details
CVE-2026-115713 CVE-2026-115713 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un HIGH 7.5 Unknown 1 Details
CVE-2026-115712 CVE-2026-115712 - Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-le MEDIUM 4.3 Unknown 1 Details
CVE-2026-115711 CVE-2026-115711 - Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E MEDIUM 6.4 Unknown 1 Details
CVE-2026-115709 CVE-2026-115709 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un HIGH 8.2 Unknown 1 Details
CVE-2026-115708 CVE-2026-115708 - Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to au HIGH 7.2 Unknown 1 Details
CVE-2026-115707 CVE-2026-115707 - Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E MEDIUM 6.4 Unknown 1 Details
CVE-2026-115706 CVE-2026-115706 - Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escal MEDIUM 6.8 Unknown 1 Details
CVE-2026-115610 CVE-2026-115610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Publi MEDIUM 6.5 Unknown 1 Details
CVE-2026-115605 CVE-2026-115605 - Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces MEDIUM 4.3 Unknown 1 Details
CVE-2026-115601 CVE-2026-115601 - Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiti MEDIUM 5.3 Unknown 1 Details
CVE-2026-114706 CVE-2026-114706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te MEDIUM 6.5 Unknown 1 Details
CVE-2026-114181 CVE-2026-114181 - Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager al MEDIUM 5.3 Unknown 1 Details
CVE-2026-110881 CVE-2026-110881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S MEDIUM 6.5 Unknown 1 Details
CVE-2026-107024 CVE-2026-107024 - Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite anot INFORMATIONAL - Unknown 1 Details
CVE-2026-107023 CVE-2026-107023 - Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrari MEDIUM 6.5 Unknown 1 Details
CVE-2026-107021 CVE-2026-107021 - Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows u INFORMATIONAL - Unknown 1 Details
CVE-2026-107020 CVE-2026-107020 - An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers HIGH 7.5 Unknown 1 Details
CVE-2026-107019 CVE-2026-107019 - Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthori INFORMATIONAL - Unknown 1 Details
CVE-2026-107018 CVE-2026-107018 - Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read a INFORMATIONAL - Unknown 1 Details