Know what to patch.
Before attackers do.
Every vulnerability with its sources in one record. Search by TI id, CVE, vendor or product.
Highest priority this week
Published or updated in the last 7 days, ranked by Threatist priority See all →- 01TI-2025-02845CVE-2025-3248 · GHSA-rvqx-wpfh-mfx7 Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/codeKEVPriority CRITICAL 100
- 02TI-2024-15709CVE-2024-23692 · GHSA-cw5c-xm7f-wx63 Rejetto HTTP File Server 2.3m Unauthenticated RCEKEVPriority CRITICAL 100
- 03TI-2026-79288CVE-2026-111497 · GHSA-9v8h-qqgm-4m35 Out-of-bounds write in Google Brotli decoderKEVPriority CRITICAL 99
- 04TI-2026-78794CVE-2026-109619 PHP remote code execution via stale global stateKEVPriority CRITICAL 99
- 05TI-2026-78793CVE-2026-109618 Out-of-memory handling flaw in PHP allows remote code executionKEVPriority CRITICAL 99
- 06TI-2026-17435CVE-2026-21643 · GHSA-r6vr-hwpr-qqch SQL injection in Fortinet FortiClientEMSKEVPriority CRITICAL 98
- 08:00 TI-2026-87014 Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injectionPriority MEDIUM 58
- 07:57 TI-2026-87013 Path traversal in DOS Co., Ltd. SS1Priority MEDIUM 46
- 07:56 TI-2026-87012 Insecure storage of sensitive information in DOS Co., Ltd. SS1Priority LOW 38
- 07:45 TI-2026-87011 aaPanel BillionMail Relay Configuration API relay.go injectionPriority LOW 39
- 07:44 TI-2026-87010 Effekseer improperly validates "effect" files.Priority LOW 38
- 07:30 TI-2026-87009 Pantum BP5100DW Web omDB.shtml missing authenticationPriority MEDIUM 46
Most exploited vendors
For your agents
The same data, over REST, MCP and A2A
Plug Threatist into your security tooling or AI agents and let them pull vulnerability data directly.
REST APIMCP ProtocolA2A Protocol
# exploited vulnerabilities, last 7 days GET /v1/kev?since=7d