Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

411 New today
67,159 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

3
Jun 18
352
Jun 19
56
Jun 20
104
Jun 21
317
Jun 22
294
Jun 23
355
Jun 24
376
Jun 25
386
Jun 26
53
Jun 27
318
Jun 28
284
Jun 29
427
Jun 30
28
Jul 1
Critical
High
Medium
Low
Latest
CVE CVSS 5.4

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains_CVE-2026-12084

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.

CVE-2026-12084 IBM UCD - IBM DevOps Deploy 8.1.0
Read analysis

Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.5 CVE-2026-11906

IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user_CVE-2026-11906

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated use...

IBM Db2 11.5.0 CVE
HIGH 7.2 CVE-2026-11806

IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability_CVE-2026-11806

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0...

IBM WebSphere Application Server - Liberty 17.0.0.3 CVE
HIGH 8.5 CVE-2026-11714

IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability_CVE-2026-11714

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the apiDiscove...

IBM WebSphere Application Server - Liberty 17.0.0.3 CVE
CRITICAL 9.3 CVE-2026-11712

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability_CVE-2026-11712

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.

IBM WebSphere Application Server 9.0 CVE
CRITICAL 9.3 CVE-2026-11708

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability_CVE-2026-11708

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help s...

IBM WebSphere Application Server 9.0 CVE
MEDIUM 4.3 CVE-2026-11595

IBM WebSphere Application Server is affected by a Path Traversal vulnerability_CVE-2026-11595

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integ...

IBM WebSphere Application Server 9.0 CVE
HIGH 7.1 CVE-2026-11546

IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability_CVE-2026-11546

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCente...

IBM WebSphere Application Server - Liberty 17.0.0.3 CVE
HIGH 8.2 CVE-2026-10564

SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection_CVE-2026-10564

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component i...

IBM Langflow OSS 1.0.0 CVE
HIGH 8.2 CVE-2026-10560

Unauthenticated Access to Private Flow Build Events and Cancellation in Langflow OSS_CVE-2026-10560

IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthen...

IBM Langflow OSS 1.0.0 CVE