The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report This guide defines what a next-generation SIEM encompasses and how to evaluate solutions built for ...

This module checks the provided hosts for the CVE-2023-21554 vulnerability by sending a MSMQ message with an altered DataLength field within the SRMPEnvelopeHeader ...

CVE-2026-89142: Airoha Technology Corp.: In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. View severity, references, and remediation details from Rapid7.

Microsoft is publishing 114 vulnerabilities this January 2026 Patch Tuesday. Today’s menu includes just one vulnerability marked as exploited in the wild, as well as two vulnerabilities where ...

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Certain form-based workflows are vulnerable to improper file handling that can result in arbitrary file ...

CVE-2026-123017: GodotSteam: GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. View severity, references, and remediation details from Rapid7.

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplied value before outputting it in a page, which could allow users with the Contributor role ...

Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions (ORDERMGR_VIEW), without ...

CVE-2026-90966: Unknown Essential Real Estate: The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing…. View severity, references, and ...

CVE-2026-48186: Samsung Semiconductor: Improper handling of messages before AS security activation can cause unexpected behavior. View severity, references, and remediation details from Rapid7.