Your threat intelligence workspace

Find the signal.
Understand the threat.

Dig into vulnerabilities, investigate indicators, and connect the evidence that matters.

Investigate an IOC
29,323
Published CVEs
1,963
Critical
10,583
High Severity
1,767
Actively Exploited
1,767
CISA KEV
Latest intelligence
Browse all CVEs
MEDIUM CVSS 4.3 Exploited CISA KEV PoC
CVE-2026-118527
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload…
T1190 T1203
2026-11-03  · connect_secure +6
NONE
CVE-2026-63224
OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV crosstab` SQL by conca…
T1190 T1059 T1105
2026-10-30
NONE
CVE-2026-63201
Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected versions, a low-privile…
T1190 T1059 T1105
2026-10-30
HIGH CVSS 7.1 PoC
CVE-2026-63184
Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter` dotnet tool invokes `NJsonSch…
T1190 T1203
2026-10-30
HIGH CVSS 8.1 PoC
CVE-2026-63182
LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate support, and message bind…
T1078 T1548
2026-10-30
MEDIUM CVSS 6.3
CVE-2026-63121
Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versions provisionally class…
T1190 T1059 T1105
2026-10-30
MEDIUM CVSS 5.3
CVE-2026-63115
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handler allows a remote fe…
T1190 T1203
2026-10-30
NONE
CVE-2026-62347
Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `SPA` logs the `passwo…
T1190 T1203
2026-10-30
MEDIUM CVSS 6.5
CVE-2026-62277
LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, `PrintRecordStickers` in `…
T1190 T1059 T1105
2026-10-30
NONE
CVE-2026-55614
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases header names but compares…
T1190 T1203
2026-10-30
NONE
CVE-2026-55613
uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize HTTP request boundarie…
T1190 T1203
2026-10-30
LOW CVSS 3.7
CVE-2026-55612
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an invalid chunk-length l…
T1190 T1203
2026-10-30