Vulnerability intelligence
Know what needs
your attention.
And what to do next.
Turn vulnerability evidence into a clear priority. Search a CVE, vendor or product to understand the risk and your next step.
No account needed30 data sources
From evidence to action
Package reportMalicious codeDependencies
Remove now
Remove the malicious package from your dependencies.
Six labels. A clear next step.Select any label to explore it
Latest high-priority signals
Records that changed priority in the last 14 days: newly listed as exploited, first exploitation attempts seen, and corrections.
Act nowCVE-2026-20320Cisco · BroadWorksNewly listed Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityListed as exploited by CISA (10-11-2026)CVSS7.5HighKEVEPSS0.39%Act nowCVE-2026-116606Barracuda Networks · Barracuda Email Security Gateway (ESG)Newly listed Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityListed as exploited by CISA (10-11-2026)CVSS9.3CriticalKEVEPSS1.60%Act nowCVE-2026-6692Newly listed Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_urlListed as exploited by CIRCL (10-11-2026)CVSS8.8HighKEVEPSS0.81%Act nowCVE-2026-111560Barracuda Networks · Multiple ProductsNewly listed Barracuda Networks Multiple Products OS Command Injection VulnerabilityListed as exploited by CISA (10-11-2026)CVSS8.6HighKEVEPSS1.06%Act nowCVE-2026-125350Google · ChromiumNewly listed Google Chromium Use-After-Free VulnerabilityListed as exploited by CISA (10-11-2026)CVSS8.8HighKEVAct nowCVE-2026-124194Microsoft · OfficeNewly listed Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityListed as exploited by CISA (10-11-2026)CVSS6.5MediumKEVAct nowCVE-2026-111793Openwave Messaging Limited · Webtop Media TranscoderNewly listed Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityListed as exploited by CISA (10-11-2026)CVSS4.3MediumKEVEPSS0.27%Act nowCVE-2026-123158OpenBSD · OpenSSHNewly listed OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityListed as exploited by CISA (09-11-2026)CVSS8.1HighKEVEPSS16.50%Act nowCVE-2026-116779SignalWire · FreeSwitchNewly listed SignalWire FreeSwitch Code Injection VulnerabilityListed as exploited by CISA (09-11-2026)CVSS9.8CriticalKEVEPSS2.18%Act nowCVE-2026-123218IBM · Aspera FaspexNewly listed IBM Aspera Faspex Incorrect Authorization VulnerabilityListed as exploited by CISA (09-11-2026)CVSS9.8CriticalKEVEPSS0.70%