Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

293 New today
66,387 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

443
Jun 15
630
Jun 16
464
Jun 17
3
Jun 18
352
Jun 19
56
Jun 20
104
Jun 21
317
Jun 22
294
Jun 23
355
Jun 24
376
Jun 25
386
Jun 26
53
Jun 27
285
Jun 28
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
NONE 8745BE4B-4A7D-

CVE_8745BE4B-4A7D-50BE-9B13-043C121DDC37

CVE Reports Security vulnerability reports and proof-of-concept code. Structure ├── reports/ Vulnerability reports ├── pocs/ Proof of Concept code ...

N/A N/A GITHUBEXPLOIT
NONE 1E46CB90-FFD8-

student-registration-rce-sqli-cve_1E46CB90-FFD8-54DE-90FF-8577C105192D

CVE-2026-XXXXX Unauthenticated Arbitrary File Upload RCE + SQL Injection in Student Registration System --- Advisory Information | Field | Value | ...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.5 CVE-2026-58058

Nmap – Integer Underflow in IPv6 Extension Header Parsing_CVE-2026-58058

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so th...

Nmap Nmap CVE
MEDIUM 5 CVE-2026-58057

Flowise – Custom MCP Environment Variable Denylist Bypass via Case Sensitivity_CVE-2026-58057

Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where en...

Flowise Flowise CVE
HIGH 7.6 CVE-2026-58056

RustDesk – FileTransfer Session Authorization Scope Bypass_CVE-2026-58056

RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer sessi...

RustDesk RustDesk CVE
MEDIUM 5.4 CVE-2026-58055

nghttp2 nghttpx – HTTP Request/Response Smuggling via Upgrade Request with Content-Length_CVE-2026-58055

nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-a...

nghttp2 nghttp2 CVE
HIGH 7.2 CVE-2026-58054

MyBB – Privilege Escalation from Limited ACP User Management to Administrator_CVE-2026-58054

MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing users; the user module offers ...

MyBB MyBB CVE
CRITICAL 9.9 CVE-2026-58053

Gitea act_runner – Container Hardening Bypass via Workflow Container Options_CVE-2026-58053

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfi...

Gitea act_runner CVE
LOW 3.3 CVE-2026-58052

7-Zip – Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision_CVE-2026-58052

7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an ...

7-Zip 7-Zip CVE