Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-118768 CVE-2026-118768 - Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response INFORMATIONAL - Unknown 1 Details
CVE-2026-118767 CVE-2026-118767 - Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containi MEDIUM 4.8 Unknown 1 Details
CVE-2026-118766 CVE-2026-118766 - Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while po MEDIUM 6.1 oracle Unknown 1 Details
CVE-2026-116566 CVE-2026-116566 - socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be INFORMATIONAL - Unknown 1 Details
CVE-2026-107347 CVE-2026-107347 - HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes HIGH 8.4 Unknown 1 Details
CVE-2026-102260 CVE-2026-102260 - HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API e MEDIUM 4.3 Unknown 1 Details
CVE-2026-118772 CVE-2026-118772 - joi: joi: Denial of Service via inefficient regular expression in email validation HIGH 7.5 Red Hatjoi joi@hapi/joi Unknown 3 sources Details
CVE-2026-62374 CVE-2026-62374 - SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and e HIGH - @sd-jwt @sd-jwt/decode@sd-jwt/core Unknown 2 sources Details
CVE-2026-11587 CVE-2026-11587 - SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database HIGH 7.2 Unknown 1 Details
CVE-2026-119115 CVE-2026-119115 - Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) HIGH 8.5 aws Unknown 1 Details
CVE-2026-118765 CVE-2026-118765 - Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then INFORMATIONAL - Unknown 1 Details
CVE-2026-118762 CVE-2026-118762 - Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml wo CRITICAL 9.3 Unknown 1 Details
CVE-2026-118760 CVE-2026-118760 - Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1 MEDIUM 6.5 Unknown 1 Details
CVE-2026-118758 CVE-2026-118758 - Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the HIGH 7.5 Unknown 1 Details
CVE-2026-115805 CVE-2026-115805 - Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local use HIGH 7.8 linux Unknown 1 Details
CVE-2026-107060 CVE-2026-107060 - Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anoth CRITICAL 9.1 Unknown 1 Details
CVE-2026-107059 CVE-2026-107059 - An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch INFORMATIONAL - Unknown 1 Details
CVE-2026-107058 CVE-2026-107058 - An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another us CRITICAL 9.8 Unknown 1 Details
CVE-2026-107057 CVE-2026-107057 - An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. INFORMATIONAL - Unknown 1 Details
CVE-2026-107056 CVE-2026-107056 - Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized INFORMATIONAL - Unknown 1 Details