Cyber Shield: The path to an agentic AI future for cyber defence
Why the UK is pioneering an initiative to develop a national scale, sovereign defence capability
Advisories tracked
21,369
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,787
Sources online
24
Last sync
2H AGO
[NEW] [medium] xwiki: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in xwiki to disclose information.
[UPDATE] [high] HCL BigFix Compliance (Ruby): Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in HCL BigFix Compliance to execute arbitrary code, bypass security measures, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[NEW] [high] DriveLock On-Premise and Cloud: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in DriveLock to disclose information, execute arbitrary code, and escalate privileges.
[NEW] [high] Devolutions Server: Vulnerability allows bypassing security measures
A remote, authenticated attacker can exploit a vulnerability in Devolutions Server to bypass MFA security measures.
USN-8515-1: Addressable vulnerability
It was discovered that Addressable incorrectly handled certain URI templates, generating regular expressions vulnerable to catastrophic backtracking. An attacker could use this issue to craft a URI that, when matched against a vulnerable template, causes excessive resource consum…
[UPDATE] [medium] Red Hat Enterprise Linux (socat): Vulnerability allows file manipulation
A local attacker can exploit a vulnerability in the 'socat' package of Red Hat Enterprise Linux to manipulate files.
[UPDATE] [medium] GnuTLS: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in GnuTLS to conduct a denial of service attack.
[UPDATE] [medium] GnuTLS: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in GnuTLS to disclose information or cause a denial of service.
[NEW] [high] Synacor Zimbra Classic Web Client: Vulnerability allows cross-site scripting
A remote, anonymous attacker can exploit a vulnerability in Synacor Zimbra Classic Web Client to conduct a cross-site scripting attack.
[NEW] [medium] Mozilla Firefox for iOS: Vulnerability allows display of false information
A remote, anonymous attacker can exploit a vulnerability in Mozilla Firefox to display false information.
[NEW] [medium] Hashicorp Terraform: Vulnerability allows information disclosure
A remote, authenticated attacker can exploit a vulnerability in Hashicorp Terraform to disclose information.
[UPDATE] [medium] CPython: Multiple vulnerabilities allow file manipulation and DoS
A remote, authenticated attacker can exploit multiple vulnerabilities in CPython to manipulate files or cause a denial-of-service condition.
[UPDATE] [low] Linux Kernel: Vulnerability allows Denial of Service
A local attacker can exploit a vulnerability in Linux Kernel to conduct a Denial of Service attack.
[NEW] [high] Coolify: Vulnerability allows code execution and disclosure
A remote, authenticated attacker can exploit a vulnerability in Coolify to execute arbitrary code and disclose information.
[NEW] [medium] vllm: Multiple vulnerabilities allow Denial of Service
An attacker can exploit multiple vulnerabilities in vllm to perform a Denial of Service attack.
[UPDATE] [medium] vllm: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in vllm to execute arbitrary code.
[UPDATE] [medium] vllm: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in vllm to bypass security measures, cause a Denial-of-Service condition, manipulate data, or disclose confidential information.
[UPDATE] [medium] CPython: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in CPython to conduct a Denial of Service attack.
[UPDATE] [high] ESRI ArcGIS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in ESRI ArcGIS to disclose information and bypass security measures.
[UPDATE] [high] AMD Processor: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the AMD Processor to escalate privileges, execute arbitrary code—even with administrator rights—manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [medium] FasterXML Jackson: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in FasterXML Jackson to bypass security measures.
[UPDATE] [high] vim: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in vim to execute arbitrary program code.
[UPDATE] [medium] dnsmasq: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in dnsmasq to conduct a denial of service attack.
[UPDATE] [medium] CPython: Vulnerability allows data manipulation
A local attacker can exploit a vulnerability in CPython to manipulate data.
[UPDATE] [medium] Xen: Vulnerability allows bypassing security measures
A local attacker from a guest VM can exploit a vulnerability in Xen to bypass security measures.
[UPDATE] [medium] vllm: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in vllm to manipulate files, bypass security measures, disclose confidential information, or cause a denial-of-service condition.
[NEW] [medium] Apache Airflow: Vulnerability allows file manipulation
An attacker can exploit a vulnerability in Apache Airflow to manipulate files.
NCSC-2026-0221 [1.00] [M/H] Vulnerabilities fixed in UniFi products from Ubiquiti Networks
Ubiquiti Networks has fixed vulnerabilities in various UniFi products, including UniFi Connect Application, UniFi Talk Application, UniFi Access Application, UniFi OS, UniFi Network Application, and UniFi Protect Application. The vulnerabilities affect multiple UniFi products and…
Apache Jena Fuseki vulnerable to path traversal
Jena Fuseki provided by The Apache Software Foundation contains a path traversal vulnerability.
Multiple vulnerabilities in Microsoft Edge (July 7, 2026)
Multiple vulnerabilities have been discovered in Microsoft Edge. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation, and a breach of data confidentiality.
Vulnerability in Mozilla Firefox for iOS (July 7, 2026)
A vulnerability has been discovered in Mozilla Firefox for iOS. It allows an attacker to bypass the security policy.
Multiple vulnerabilities in Microsoft Azure Linux (July 7, 2026)
Multiple vulnerabilities have been discovered in Microsoft Azure Linux. They allow an attacker to cause an unspecified security issue by the vendor.
CVE-2026-48282: Adobe ColdFusion Path Traversal Vulnerability
Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.
DSA-6383-1 imagemagick - security update
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. https://se…
CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability
Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.
Vulnerability in Synacor Zimbra Collaboration (July 7, 2026)
A vulnerability has been discovered in Synacor Zimbra Collaboration. It allows an attacker to cause a remote indirect code injection (XSS).
DSA-6382-1 postfix - security update
Multiple security vulnerabilities were discovered in the Postfix mail transport agent, which could result in denial of service. https://security-tracker.debian.org/tracker/DSA-6382-1
Multiple vulnerabilities in Postfix (July 7, 2026)
Multiple vulnerabilities have been discovered in Postfix. They allow an attacker to cause a denial of service and an unspecified security issue by the vendor.
Multiple vulnerabilities in PHP (July 7, 2026)
Multiple vulnerabilities have been discovered in PHP. They allow an attacker to cause an unspecified security issue by the vendor.
Multiple vulnerabilities in SPIP (July 7, 2026)
Multiple vulnerabilities have been discovered in SPIP. Some of them allow an attacker to cause a breach of data confidentiality, a SQL injection (SQLi), and a remote indirect code injection (XSS).
CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
GHSA-pmfc-4wjj-gmhx: cut: -s ignored in -z -d '' newline-delimiter mode
cut routes -z -d '' through a special newline-delimiter path that ignores the -s only-delimited flag, emitting whole undelimited records (plus NUL) that should be suppressed. Pipelines relying on cut -s to drop undelimited records process data that should be filtered. printf 'ab…
GHSA-r9hw-mj3w-phcq: mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)
uutils calls mknod *before* setting the SELinux context (GNU uses setfscreatecon first, labeling atomically). If set_selinux_security_context fails, cleanup uses std::fs::remove_dir, which cannot remove device nodes or FIFOs, leaving the mislabeled node behind. Impact: on SELinu…
GHSA-pmf6-rcx4-v53v: mkfifo: permissions of an existing file are changed after FIFO creation fails
When mkfifo() fails (e.g. target already exists), the code shows an error but is missing a continue;, so it falls through to fs::set_permissions and changes the permissions of the pre-existing file to the default FIFO mode (0o666 & umask -> 0644). $ touch secret; chmod 000 secre…
GHSA-qrwj-vh9x-gw5v: Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write
Summary agentConn.apiClient() used the default redirect behavior of http.Client while its custom transport dialed the host from the request URL as long as the port was the workspace agent HTTP API port (4). Agent tailnet IPs are deterministic from agent UUIDs, so a malicious wor…
GHSA-cgfv-jrfp-2r7v: OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
Summary The datapoint export API builds a PostgreSQL crosstab export query by concatenating asset display names into raw SQL. An authenticated user who can create or rename an asset and then request a crosstab datapoint export can inject SQL through the asset name. The injected …
GHSA-473p-56xx-vg67: Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
Summary In Kiwi TCMS the fields TestCase.extra_link and TestPlan.extra_link were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site sc…
GHSA-7cfm-pqrj-xgq7: 9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
Summary The 9router dashboard login rate limiter derives the client identity from the attacker-controlled X-Forwarded-For HTTP header. When 9router is directly exposed, or deployed behind a reverse proxy that does not overwrite untrusted forwarding headers, a remote attacker can…