Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

485 New today
60,231 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

111
May 24
204
May 25
336
May 26
455
May 27
326
May 28
451
May 29
206
May 30
84
May 31
417
Jun 1
295
Jun 2
151
Jun 3
354
Jun 4
517
Jun 5
76
Jun 6
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.6 THN:28ECB8D8884...

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs_THN:28ECB8D88842DE5F9553D37CC071ED99

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyg1vRQART17ZjJXANnrQ8Vtn7h_tM5IihGJ4LnxbGTDFL1QSvR_lEDmVm7bsO84br04_oM-RM9ZgX-6b5yV...

N/A N/A THN
HIGH 7.5 THN:74EB74663A9...

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog_THN:74EB74663A9229D934363355C5927F84

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQ_ZbsHhh5kUS5501itVSeBa91H50qNfHH_PQ1_2WEDLi-B_eKslYeu1_43fNAW55Z9TVR5ae8ZIGDm4vZQS...

N/A N/A THN
NONE THN:DA2FCA79C0C...

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI_THN:DA2FCA79C0C6D04CAA866AECB4D6FD68

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKr3KoscB_oGLqU5_JV16DIaB7jXY1ko8PiJDTuwrxbHcZV2DYJpfkx8lqwNbscwTSTVQUMwd8vBf-nI13mQ...

N/A N/A THN
HIGH 8 CB25E601-F8DB-

Exploit for Heap-based Buffer Overflow in Mediatek Mt6890_Firmware_CB25E601-F8DB-5A0A-9D27-2D1C005BFA43

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Ac...

N/A N/A GITHUBEXPLOIT
NONE THN:ED7CB5908CA...

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack_THN:ED7CB5908CA7EDF70F93B2175FB7C683

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgG8k6LtHNQ3cHl_X1AZbXRn6LZCNZ6lMLjy-9HG7-_OQekMOhCQKkktrnMqVteXfmGHBMMlbTv3v9Rl6kKjX...

N/A N/A THN
HIGH 7.2 CVE-2026-9851

Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action_CVE-2026-9851

The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This ...

masaakitanaka Booking Package CVE
MEDIUM 6.5 CVE-2026-9829

Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter_CVE-2026-9829

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'compact_album_order_...

10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery CVE
MEDIUM 4.4 CVE-2026-9594

WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter_CVE-2026-9594

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Sc...

flippercode WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters CVE
MEDIUM 5.3 CVE-2026-9016

Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action_CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in al...

qriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors CVE