Security services · Products · Sourced intelligence

Complex threats.
Clear next moves.

Expert services, focused products and practical research. Connect your security priorities to the next action that matters.

Explore our services Talk to an expert

48 services across six disciplinesCVE intelligence sourced from CISA, NVD and FIRSTNo invented statistics

Live evidence · 7 days · 6-hour syncLast sync Nov 13, 2026, 12:22 AM UTC

4,850CVEs published (NVD)

69with a public PoC on GitHub

1,779in CISA's exploited catalog

CVE-2026-0101
Improper validation of specified quantities in input within AMD Power Management Firmware (PMFW) could allow a local attacker to pass unsanitized input, potentially resulting in a system crash or denial of service.
CVSS 6.8
CVE-2026-127016
The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configuration) that did not enforce the optional administrator authentication policy. When ADMIN_PASSWORD was configured in the application environment, the module configuration endpoints correctly required an authenticated administrator session, but the external tools management handlers processed requests from anonymous users without any authorization check. An unauthenticated attacker with network access to the website could add arbitrary external tools, delete existing tools, toggle their active status, and modify their configurations including API keys and ingestion URLs. This inconsistency allowed bypass of the intended access control for the external tools management functionality. The vulnerability is conditional on ADMIN_PASSWORD being set; installations without…
CVSS 9.2
CVE-2026-87772
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5.
CVSS 7.8

Sources: NVD · CISA KEV · FIRST EPSS · PoC-in-GitHubOpen the feed

01 / Our services

Start with the challenge.
Find the right expertise.

Full service directory

01Offensive security 02AI security 03Cloud & identity 04Detection & response 05Advisory & governance 06Security engineering

A more focused starting point

Find the paths worth closing.

Examine your applications, APIs and infrastructure. Turn technical findings into focused remediation decisions.

Vulnerability assessment & testing API security testing Explore this discipline →

02 / Our products

Two products.
A place for each.

Explore the collection ↗

SECURELINE / GRCProduct introduction

Governance,
with a clearer view.

Explore Secureline GRC and its public product portal. Start a conversation about the workflow your organisation needs.

ControlsEvidenceRisksAudits

Explore Secureline GRC ↗

SECURELINE / PROMPTGATEProduct introduction

A distinct product.
Its own conversation.

A dedicated place for Promptgate, separate from the service directory. Contact Secureline for confirmed product details.

Meet Promptgate ↗

03 / The research journal

A closer look.
A clearer perspective.

Browse the journal ↗

READING NOTEFrom the Secureline blog

Why annual VAPT
is not enough in 2026.

A source-linked reading note on the gap between periodic testing and the way applications, identities and infrastructure actually change.

Read the note ↗

PROPOSED WHITEPAPERDraft outline

From a finding to
a business decision.

An editorial outline connecting vulnerability evidence, business context, remediation ownership and verification.

Explore the outline ↗

04 / Evidence, with context

Look past the headline.

Source-backed vulnerability records and clearly labelled research. No simulated alerts. No invented attack counters.

Explore CVE intelligence Latest CVEs and public PoCs

The last 7 days, in proportion

All

4,850

Listed

300

PoC

KEV

All: CVEs published to the NVD in the window. Listed: the ones shown on the latest-CVEs page (every CVE with a public PoC or in CISA KEV, then the highest CVSS scores). PoC: at least one public GitHub repository names the CVE. KEV: added to CISA's exploited catalog. The separate KEV snapshot holds 1,779 records (source updated Nov 10, 2026). None of this measures your exposure.

The next move starts
with the right conversation.

Discuss your requirements ↗

Complex threats.Clear next moves.

Start with the challenge.Find the right expertise.

Find the paths worth closing.

Two products.A place for each.

Governance,with a clearer view.

A distinct product.Its own conversation.

A closer look.A clearer perspective.

Why annual VAPTis not enough in 2026.

From a finding toa business decision.