Public vulnerability and advisory intelligence gathered from the configured MSRC, NIST NVD, CISA KEV and FIRST EPSS sources and other public feeds. Strictly public telemetry — no customer tenant instrumentation.
Collection Degraded|Last successful 18 Oct 2026, 09:46 PM IST
Counts as of 18 Oct 2026, 10:16 PM IST, computed when this page loaded. Pipeline health reads the same collection status as Source Health.
What Changed?
Ranked across sources
UPDATED TODAY
CVE-2025-66576 · Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.
databaseremotecontrolio · Limited verification•Public CVE record•Updated · 18 Oct 2026, 08:40 PM IST
Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.
shieldMicrosoft Security Update Guide · Limited verification•Primary source•Updated · 18 Oct 2026, 07:17 AM IST
1676 Microsoft CVEs in the 2026-Aug security release.
Why ranked: High priority · Microsoft SOC relevance · Updated today
Microsoft security updateazl3 nghttp2 1.61.0-3 on Azure Linux 3.0azl3 rust 1.75.0-30 on Azure Linux 3.0CVE-2022-4996CVE-2025-30156Release summary
NEW TODAY
CVE-2026-112051 · Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name
databaseNVD · Limited verification•Public CVE record•Published · 18 Oct 2026, 06:46 PM IST
Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name.…
Why ranked: High priority · Microsoft SOC relevance · New today
Vulnerability
UPDATED TODAY
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
descriptionMSRC CSAF / VEX · Limited verification•Primary source•Updated · 18 Oct 2026, 07:17 AM IST
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption CVE-2026-13201 Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink…
Microsoft security updateazl3 kubevirt 0:1.8.4-1.azl3 as a component of Azure Linux 3.0<azl3 kubevirt 0:1.8.4-2.azl3 as a component of Azure Linux 3.0CVE-2026-13201
UPDATED TODAY
CVE-2025-65958 · Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline
databaseopenwebui · Limited verification•Public CVE record•Updated · 18 Oct 2026, 08:40 PM IST
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force…
Why ranked: High priority · Microsoft SOC relevance · Linked KQL · Updated today
Vulnerabilityopenwebui open webui
UPDATED TODAY
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
descriptionMSRC CSAF / VEX · Limited verification•Primary source•Updated · 18 Oct 2026, 07:13 AM IST
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU…
Why ranked: Microsoft SOC relevance · Updated today
Microsoft security updateazl3 keda 0:2.14.1-16.azl3 as a component of Azure Linux 3.0<azl3 keda 0:2.14.1-19.azl3 as a component of Azure Linux 3.0CVE-2026-53572
UPDATED TODAY
CVE-2026-107324 · Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver
shieldMicrosoft · Limited verification•Vendor CVE record•Updated · 18 Oct 2026, 07:16 AM IST
— No summary in stored record
Why ranked: Medium priority · Microsoft SOC relevance · Updated today
Vulnerabilityazl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
What Deserves Attention?
Ranked by public signals
KEV-listed first, then EPSS, CVSS, latest change. Public vulnerability signals only, not tenant or environment exposure.
infoSecOps Signal makes no synthetic tenant extrapolations. Indicators reflect upstream public feeds only; a value the sources have not published is shown as — or Unknown. Applicability to your environment is unknown; no tenant inventory is connected.