Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

147 New today
59,318 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

202
May 22
67
May 23
111
May 24
204
May 25
336
May 26
455
May 27
326
May 28
451
May 29
206
May 30
84
May 31
417
Jun 1
295
Jun 2
151
Jun 3
34
Jun 4
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 4.9 CVE-2026-44917

CVE-2026-44917_CVE-2026-44917

OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_temp...

OpenStack Ironic 17.0.0 CVE
CRITICAL 9.9 CVE-2026-41283

CVE-2026-41283_CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, whi...

OpenStack Mistral 20.0.0 CVE
HIGH 8.7 CVE-2026-41010

CVE-2026-41010_CVE-2026-41010

ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name re...

Cloud Foundry Foundation BOSH Director CVE
CRITICAL 9.2 A68A628E-AB61-

Exploit for CVE-2026-42945_A68A628E-AB61-551B-9ECD-769EA5A45A85

nginx-rift-scanner Dependency-free Python 3 scanner for CVE-2026-42945 "NGINX Rift" — a CVSS v4.0 9.2 CRITICAL heap-based buffer overflow CWE-122 i...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.5 CVE-2026-8653

MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter_CVE-2026-8653

The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in all versions up to, and inc...

StylemixThemes MasterStudy LMS Pro CVE
HIGH 7.5 CVE-2026-10737

SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function_CVE-2026-10737

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file func...

smartypants SP Project & Document Manager CVE
HIGH 7.1 CVE-2026-41860

CVE-2026-41860_CVE-2026-41860

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_end...

Cloud Foundry Foundation BOSH CVE
HIGH 7.1 CVE-2026-41859

CVE-2026-41859_CVE-2026-41859

A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and...

Cloud Foundry Foundation BOSH CVE
MEDIUM 6.5 CVE-2026-41858

CVE-2026-41858_CVE-2026-41858

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network a...

Cloud Foundry Foundation windows-utilities-release CVE