Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-93571 CVE-2026-93571 - Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req INFORMATIONAL - Unknown 1 Details
CVE-2026-93570 CVE-2026-93570 - Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf INFORMATIONAL - Unknown 1 Details
CVE-2026-90991 CVE-2026-90991 - IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al MEDIUM 6.5 Unknown 1 Details
CVE-2026-90872 CVE-2026-90872 - Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F MEDIUM 6.6 Unknown 1 Details
CVE-2026-90871 CVE-2026-90871 - Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0. MEDIUM 5.3 Unknown 1 Details
CVE-2026-90870 CVE-2026-90870 - A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi MEDIUM 5.3 Unknown 1 Details
CVE-2026-90869 CVE-2026-90869 - A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S HIGH 7.5 Unknown 1 Details
CVE-2026-90868 CVE-2026-90868 - An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind CRITICAL 9.9 Unknown 1 Details
CVE-2026-90867 CVE-2026-90867 - Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025. HIGH 8.1 Unknown 1 Details
CVE-2026-90866 CVE-2026-90866 - A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou CRITICAL 9.1 Unknown 1 Details
CVE-2026-90865 CVE-2026-90865 - An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind CRITICAL 9.0 Unknown 1 Details
CVE-2026-90864 CVE-2026-90864 - A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou CRITICAL 9.1 Unknown 1 Details
CVE-2026-90863 CVE-2026-90863 - Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and CRITICAL 9.1 Unknown 1 Details
CVE-2026-90862 CVE-2026-90862 - Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202 MEDIUM 4.3 Unknown 1 Details
CVE-2026-90861 CVE-2026-90861 - Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear MEDIUM 6.6 Unknown 1 Details
CVE-2026-88090 CVE-2026-88090 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized MEDIUM 5.4 microsoft Unknown 1 Details
CVE-2026-88077 CVE-2026-88077 - Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges HIGH 8.8 microsoft Unknown 1 Details
CVE-2026-85899 CVE-2026-85899 - Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. HIGH 8.1 microsoft Unknown 1 Details
CVE-2026-85330 CVE-2026-85330 - Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over MEDIUM 4.3 microsoft Unknown 1 Details
CVE-2026-84296 CVE-2026-84296 - Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2 MEDIUM 6.8 Unknown 1 Details