Vulnerability intelligence
Know what needs
your attention.
And what to do next.
Turn vulnerability evidence into a clear priority. Search a CVE, vendor or product to understand the risk and your next step.
No account needed30 data sources
From evidence to action
Package reportMalicious codeDependencies
Remove now
Remove the malicious package from your dependencies.
Six labels. A clear next step.Select any label to explore it
Latest high-priority signals
Records that changed priority in the last 14 days: newly listed as exploited, first exploitation attempts seen, and corrections.
Act nowCVE-2026-6692Newly listed Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_urlListed as exploited by CIRCL (10-11-2026)CVSS8.8HighKEVEPSS0.81%Act nowCVE-2026-123158OpenBSD · OpenSSHNewly listed OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityListed as exploited by CISA (09-11-2026)CVSS8.1HighKEVEPSS16.50%Act nowCVE-2026-116779SignalWire · FreeSwitchNewly listed SignalWire FreeSwitch Code Injection VulnerabilityListed as exploited by CISA (09-11-2026)CVSS9.8CriticalKEVEPSS2.18%Act nowCVE-2026-123218IBM · Aspera FaspexNewly listed IBM Aspera Faspex Incorrect Authorization VulnerabilityListed as exploited by CISA (09-11-2026)CVSS9.8CriticalKEVEPSS0.70%Act nowCVE-2026-102895GPUStackNewly listed GPUStack Improper Authentication VulnerabilityListed as exploited by CISA (09-11-2026)CVSS9.8CriticalKEVEPSS0.56%Act nowCVE-2026-19868SonicWall · SonicOS SSLVPNNewly listed SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilityListed as exploited by CISA (06-11-2026)CVSS7.5HighKEVEPSS0.53%Act nowCVE-2024-27834Apple · Multiple ProductsNewly listed Apple Multiple Products Improper Authentication VulnerabilityListed as exploited by CISA (04-11-2026)CVSS5.5MediumKEVEPSS1.50%Act nowCVE-2026-58115Siemens · SIMATIC IoT2050Newly listed Siemens SIMATIC IoT2050Listed as exploited by ENISA (03-11-2026)CVSS10.0CriticalKEVEPSS0.89%Act nowCVE-2026-119977WordPress · WordPress CoreNewly listed WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityListed as exploited by CISA (03-11-2026)CVSS8.1HighKEVEPSS1.20%Act nowCVE-2026-111357Ivanti · Connect SecureNewly listed Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityListed as exploited by CISA (30-10-2026)CVSS7.0HighKEVEPSS0.53%