Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-84295 CVE-2026-84295 - Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo CRITICAL 10.0 Unknown 1 Details
CVE-2026-84294 CVE-2026-84294 - Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20 HIGH 7.7 Unknown 1 Details
CVE-2026-77819 CVE-2026-77819 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im MEDIUM 6.5 Unknown 1 Details
CVE-2026-77817 CVE-2026-77817 - IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to MEDIUM 6.5 Unknown 1 Details
CVE-2026-66912 CVE-2026-66912 - Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Cla INFORMATIONAL - Unknown 1 Details
CVE-2026-66911 CVE-2026-66911 - Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due INFORMATIONAL - Unknown 1 Details
CVE-2026-62131 CVE-2026-62131 - Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. CRITICAL 9.8 zoho Unknown 1 Details
CVE-2026-62018 CVE-2026-62018 - Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62017 CVE-2026-62017 - Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62016 CVE-2026-62016 - Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62015 CVE-2026-62015 - Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62014 CVE-2026-62014 - Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62013 CVE-2026-62013 - Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62012 CVE-2026-62012 - Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62011 CVE-2026-62011 - Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62010 CVE-2026-62010 - Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62009 CVE-2026-62009 - Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62008 CVE-2026-62008 - Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62006 CVE-2026-62006 - Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-62005 CVE-2026-62005 - Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. CRITICAL 9.8 Unknown 1 Details