CVE CVE
ESC
Type to search CVEs in real-time
Enter open Esc close Ctrl K toggle

Real-Time Threat Intelligence & CVE Tracker

Continuous monitoring and intelligence feed for newly disclosed Common Vulnerabilities and Exposures (CVEs).

100 CISA KEV Exploits Active 1 Vulnerabilities Monitored Live Feed Sync: Real-time
All Time Today 7 Days 30 Days 1 Year
All Operating Systems Servers Hypervisors Hosting Panels Billing CMS Plugins CRM ERP Databases Network / Firewall Mail Servers Web & Hosting Related
Filtered by category: Databases
Clear category filter
Total Tracked
1
Indexed CVEs
Critical
1
CVSS 9.0 - 10.0
High
0
CVSS 7.0 - 8.9
Medium
0
CVSS 4.0 - 6.9
Low
0
CVSS 0.1 - 3.9
Unscored
0
Pending Score
High-Impact Zero-Day Spotlight CRITICAL CVSS 9.8 3 months ago
CVE-2026-20253: Splunk Enterprise Vulnerability

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

Vendor: Splunk Fix: Vendor Patch / Mitigation Available
Analyze Advisory

Vulnerability Severity Distribution

1 total
Critical
1 (100%)
High
0 (0%)
Medium
0 (0%)
Low
0 (0%)

Top Targeted Vendors & Stacks

Ranked
#1 Microsoft 18 #2 Hcltech 13 #3 Cisco 10 #4 Linux 3 #5 Fortinet 3 #6 Langflow 3 #7 Oracle 3 #8 SimpleHelp 3
Common Attack Vectors (Top CWEs)
CWE-89 SQL Injection (SQLi) CWE-79 Cross-Site Scripting (XSS) CWE-862 Missing Authorization CWE-94 Code Injection (RCE) CWE-287 Improper Authentication CWE-22 Path Traversal

Latest Security Vulnerabilities

Explore Feed
CVE-2026-20253 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 3 months ago

Splunk Enterprise Vulnerability

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

Vendor: Splunk Product: Enterprise View Details

Threat News & Incidents

All Reports
HackerNews 1 month ago

Wallabag Full Disclosure CVSS8.5 Stored XSS+SSRF after no patched no cve

SecurityWeek 1 month ago

In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

SecurityWeek 1 month ago

Trivy, Not LiteLLM Behind the 2,500 Org Compromise

SecurityWeek 1 month ago

Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

SecurityWeek 1 month ago

1.6 Million Likely Impacted by RingCentral Data Breach

SecurityWeek 1 month ago

Over 1,000 Charities Hit by Beacon CRM Data Breach

SecurityWeek 1 month ago

14,000 Trezor Customers Impacted by Data Breach at ShipMonk

HackerNews 1 month ago

You're Back in the Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))