SecurityVulnerability.io
Collect, Display, Alert.
The Cyber Security
Vulnerability Database
Trending
Vulnerabilities
If it's trending, then it's probably important.
Patch quicker!
Spoofing Vulnerability in Microsoft Office Outlook
CVE-2026-124194
MicrosoftMicrosoft 36...πΎπ‘6.5MEDIUM
Unauthenticated Remote Code Execution in React Server Components Framework
CVE-2026-126187
ReactReactπΎπ‘9.5CRITICAL
Use After Free Vulnerability in Google Chrome
CVE-2026-125350
GoogleChromeπΎπ‘8.8HIGH
Improper Synchronization Vulnerability in Apache HTTP Server's mod_http2
CVE-2026-119618
ApacheApache Http ...πΎπ‘8.1HIGH
Arbitrary Code Execution Vulnerability in Confection WordPress Plugin
CVE-2026-115252
WordPressConfection W...πΎπ‘10CRITICAL
Authentication Bypass in SonicWall SonicOS SSLVPN Service
CVE-2026-19868
SonicwallSonicosπΎ7.5HIGH
User Enumeration Vulnerability in OpenSSH by The OpenBSD Foundation
CVE-2016-6210
OpenBSDOpensshπΎπ‘π£5.9MEDIUM
Authorization Bypass Vulnerability in Entra Device Registration by Microsoft
CVE-2026-109469
MicrosoftEntra Device...10CRITICAL
Heap-based Buffer Overflow in SQL Server by Microsoft
CVE-2026-116945
MicrosoftMicrosoft Sq...9.8CRITICAL
Latest Ransomware
Vulnerabilities
Local Privilege Escalation in Gaia OS by Check Point
CVE-2026-123039CheckpointQuantum Security Gatewayπ°πΎπ¦ π°7.8HIGHUse-After-Free Vulnerability in MongoDB Server's Replication Component
CVE-2026-118383MongodbMongodb Serverππ°πΎπ‘π°9.5CRITICALFile Permission Vulnerability in Kiro CLI on macOS and Linux
CVE-2026-124848AmazonKiro Cliπ°πΎπ°6.8MEDIUMiOS 17.5 and Later Fixes Bypass Pointer Authentication Vulnerability
CVE-2024-27834AppleSafariππ°πΎπ¦ π°5.5MEDIUMImproper Resource Isolation in Amazon EKS Network Policy Agent
CVE-2026-122266AwsAws-network-policy-agentπ°πΎπ°6.3MEDIUM
13 November 2026
12 November 2026
6 November 2026
5 November 2026
Exploit Intelligence by SecurityVulnerability.io
Understand what's being exploited!
Highlighting what's important

Emerging vulnerabilities & threats
Every hour we analyze over 50 data sources to identify the emerging threats that matter to you, and your business!

Trusted by
SecurityVulnerability.io was built to help colleagues in the industry.
- Active Users
- 30k+
- Data Sources
- 50+
- Vulnerabilies Tracked
- 200k+
- New Vulnerabilities Each Day
- 120+
5 out of 5 stars
βUnderstanding what's really important in a world with too much information allows Cytadel to always be at the cutting edge of protective activites.β

Manit Sahib
CEO of Cytadel
Boost your productivity.
Start using SecurityVulnerability.io
The database is open and free to use.
Advanced queries and alerting require a free account.
Frequently asked questions
- π What is SecurityVulnerability.io?
- SecurityVulnerability.io is a live platform that curates, summarizes, and explains critical Cyber Security vulnerabilities (CVEs) for security professionals, engineers, and IT teams. We make it easier to track threats across vendors like Microsoft, Cisco, Apple, and more β without the noise.
- π How does SecurityVulnerability.io work?
- We analyze thousands of sources, including CVE databases, vendor advisories, and security blogs, to provide you with the most relevant and actionable information. Our platform uses advanced algorithms to filter out noise and highlight the vulnerabilities that matter most.
- π How often is the site updated?
- We publish updates hourly. New CVEs, emerging exploits, high-severity alerts, and major vendor advisories are continuously monitored and posted.
- π How can I stay informed about new vulnerabilities?
- You can subscribe to our newsletter, follow us on social media, or set up alerts on our platform to receive notifications about new vulnerabilities and updates.
- π° Is SecurityVulnerability.io free?
- Yes! Our platform is completely free to use. We believe in providing valuable resources to the Cyber Security community without any cost.
- π οΈ Do you provide exploit details or PoCs?
- When available and publicly disclosed, we include links to proof-of-concept (PoC) exploits, or tag the vulnerability as actively exploited in the wild. However, we never host code ourselves.

