Vulnerability intelligence
Know what needs
your attention.
And what to do next.
Turn vulnerability evidence into a clear priority. Search a CVE, vendor or product to understand the risk and your next step.
No account needed30 data sources
From evidence to action
Package reportMalicious codeDependencies
Remove now
Remove the malicious package from your dependencies.
Five labels. A clear next step.Select any label to explore it
Latest high-priority signals
Records that changed priority in the last 14 days: newly listed as exploited, first exploitation attempts seen, and corrections.
Act nowCVE-2026-46300Linux · KernelNewly listed Linux Kernel Missing Initialization of a Variable VulnerabilityListed as exploited by CISA (28-10-2026)CVSS7.8HighKEVEPSS10.19%Act nowCVE-2026-41709Broadcom · VMware ESXNewly listed Broadcom VMWare ESX Insufficient Logging VulnerabilityListed as exploited by CISA (28-10-2026)CVSS2.7LowKEVEPSS0.30%Act nowCVE-2026-111497Google · BrotliNewly listed Google Brotli Unchecked Return Value VulnerabilityListed as exploited by CISA (27-10-2026)CVSS9.2CriticalKEVEPSS87.99%Act nowCVE-2026-48356Adobe · Commerce and MagentoNewly listed Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityListed as exploited by CISA (27-10-2026)CVSS9.3CriticalKEVEPSS59.08%Act nowCVE-2026-109618PHP Group · PHPNewly listed PHP Memory Corruption VulnerabilityListed as exploited by CISA (26-10-2026)CVSS9.2CriticalKEVEPSS100.00%Act nowCVE-2026-109619PHP Group · PHPNewly listed PHP Stale Internal Request-State VulnerabilityListed as exploited by CISA (26-10-2026)CVSS9.2CriticalKEVEPSS100.00%Act nowCVE-2026-105134Ahsay · AhsayCBSNewly listed Ahsay AhsayCBS Command Injection VulnerabilityListed as exploited by ENISA (23-10-2026)CVSS10.0CriticalKEVEPSS81.76%Act nowCVE-2026-105133Ahsay · AhsayCBSNewly listed Ahsay AhsayCBS Improper Authentication VulnerabilityListed as exploited by ENISA (23-10-2026)CVSS6.9MediumKEVEPSS79.47%Act nowCVE-2026-110447Collabora · Collabora Online – Built-in CODE ServerNewly listed Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityListed as exploited by CISA (23-10-2026)CVSS9.2CriticalKEVEPSS11.63%Act nowCVE-2026-114625Arista · VeloCloud OrchestratorNewly listed Arista VeloCloud Orchestrator SQL Injection VulnerabilityListed as exploited by CISA (23-10-2026)CVSS9.4CriticalKEVEPSS1.03%