Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-91462 CVE-2026-91462 - openjdk: Enhance krb5 tokens (Oracle CPU 2026-10) MEDIUM 5.9 Red Hat Unknown 1 Details
CVE-2026-91461 CVE-2026-91461 - openjdk: Enhance TLS Extensions (Oracle CPU 2026-10) LOW 3.7 Red Hat Unknown 1 Details
CVE-2026-91452 CVE-2026-91452 - openjdk: Enhance HTTP server (Oracle CPU 2026-10) MEDIUM 5.3 Red Hat Unknown 1 Details
CVE-2026-91453 CVE-2026-91453 - openjdk: Improve HTTP headers (Oracle CPU 2026-10) MEDIUM 5.3 Red Hat Unknown 1 Details
CVE-2026-91451 CVE-2026-91451 - openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10) MEDIUM 5.3 Red Hat Unknown 1 Details
CVE-2026-111879 CVE-2026-111879 - perl-DBI: perl-DBI: Denial of Service via unreleased table lock on error MEDIUM 5.5 Red Hat Unknown 1 Details
CVE-2026-108518 CVE-2026-108518 - perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profile MEDIUM 4.7 Red Hat Unknown 1 Details
CVE-2026-113712 GHSA-x397-5hrv-j9m9 - Cachet has Stored XSS in Incident Component MEDIUM - cachethq cachethq/cachet Unknown 1 Details
CVE-2026-111762 GHSA-x32g-jvvm-4725 - A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure MEDIUM - org.a2aproject.sdk:a2a-java-sdk-transport-rest org.a2aproject.sdk:a2a-java-sdk-transport-rest Unknown 1 Details
CVE-2026-111765 GHSA-4fpj-g9jf-9rgg - A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix HIGH 7.5 org.a2aproject.sdk:a2a-java-sdk-http-client-android org.a2aproject.sdk:a2a-java-sdk-http-client-android Unknown 1 Details
CVE-2026-113812 CVE-2026-113812 - perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates HIGH 7.4 Red Hat Unknown 1 Details
CVE-2026-111761 GHSA-q78c-5jjq-57g8 - A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery MEDIUM 5.8 org.a2aproject.sdk:a2a-java-sdk-server-common org.a2aproject.sdk:a2a-java-sdk-server-common Unknown 1 Details
CVE-2026-111764 GHSA-qw47-mcm5-934w - A2A Java SDK has a fail-open default task authorization HIGH 7.5 org.a2aproject.sdk:a2a-java-sdk-server-common org.a2aproject.sdk:a2a-java-sdk-server-common Unknown 1 Details
CVE-2026-111763 GHSA-9rhm-2h4x-jwmx - A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect MEDIUM - org.a2aproject.sdk:a2a-java-sdk-parent org.a2aproject.sdk:a2a-java-sdk-parent Unknown 1 Details
CVE-2026-113274 CVE-2026-113274 - chromium-browser: chromium-browser: Use after free in ReadingMode HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113039 CVE-2026-113039 - chromium-browser: chromium-browser: Use after free in Bookmarks HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113130 CVE-2026-113130 - chromium-browser: chromium-browser: Use after free in Actor HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113074 CVE-2026-113074 - chromium-browser: chromium-browser: Use after free in Media HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113314 CVE-2026-113314 - chromium-browser: chromium-browser: Use after free in Media HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113017 CVE-2026-113017 - chromium-browser: chromium-browser: Use after free in Views HIGH 8.8 Red Hat Unknown 1 Details