Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

224 New today
65,462 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

336
Jun 12
60
Jun 13
68
Jun 14
443
Jun 15
630
Jun 16
464
Jun 17
3
Jun 18
352
Jun 19
56
Jun 20
104
Jun 21
317
Jun 22
294
Jun 23
355
Jun 24
175
Jun 25
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.3 CVE-2026-33543

FOSSBilling: Authentication bypass allows unauthenticated administrator creation_CVE-2026-33543

FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior expose a guest API endpoint, /api/guest/staff/cre...

FOSSBilling FOSSBilling < 0.8.0 CVE
HIGH 7.7 CVE-2026-33235

AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features_CVE-2026-33235

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions prior to 0.6...

Significant-Gravitas AutoGPT >= 0.1.0, < 0.6.52 CVE
MEDIUM 5.5 CVE-2026-32315

motionEye: World-Readable Configuration File Exposes Admin Password Hash_CVE-2026-32315

motionEye (mEye) is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create th...

motioneye-project motioneye < 0.44.0 CVE
MEDIUM 6.5 CVE-2026-31978

motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint_CVE-2026-31978

motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection. Versions prior to 0.44.0 ...

motioneye-project motioneye < 0.44.0 CVE
MEDIUM 6.5 CVE-2026-13208

Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body_CVE-2026-13208

A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SEvent derive the VMI identit...

Red Hat Red Hat OpenShift Virtualization 4 CVE
MEDIUM 5.2 CVE-2026-13201

Kubevirt: virt-handler-rhel9: kubevirt: safepath openatnofollow symlink following via /proc/self/fd allows host file metadata modification_CVE-2026-13201

A flaw was found in KubeVirt's safepath package. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but...

Red Hat Red Hat OpenShift Virtualization 4 CVE
HIGH 7.6 CVE-2026-11998

AngularJS XSS via SCE resource URL sanitization bypass_CVE-2026-11998

A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaS...

Google AngularJS >=1.2.0-rc.3 CVE
HIGH 7.2 CVE-2026-9779

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability_CVE-2026-9779

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows ...

ATEN Unizon 2.6.253.001 CVE
HIGH 7.2 CVE-2026-9778

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability_CVE-2026-9778

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

ATEN Unizon 2.7.262.002 CVE