The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber ...
While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report The vulnerability affects self-managed GitLab instances across all deployment types. GitLab.com is ...
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ...
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer ...
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 11, 2026, CVE-2026-85706 was added to the U.S. Cybersecurity and Infrastructure Security ...
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape ...
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback ...
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results