Critical Alert 1 Active Exploit Detected Today

CVE-2026-85046 — Google Chromium V8 Type Confusion Vulnerability →

Powered by CVE Watchtower

×

Dark Caracal

Dark Caracal Deploys New GoCaracal Malware Framework Diagram showing the Dark Caracal GoCaracal malware attack chain and GoCaracal malware framework

Diagram showing the Dark Caracal GoCaracal malware attack chain and GoCaracal malware framework

Dark Caracal Deploys New GoCaracal Malware Framework

Do Son September 1, 2026

At a Glance Category Details Threat Actor Dark Caracal (suspected connection to Lebanese GDGS) Activity Type Cyberespionage,...

CSE CybSec ZLAB releases Malware Analysis Report: Dark Caracal APT

Dark Caracal

CSE CybSec ZLAB releases Malware Analysis Report: Dark Caracal APT

Do Son February 14, 2018

According to securityaffairs February 12, researchers from CSE’s CybSec ZLAB lab analyzed a sample set of Pallas malware...

Designed for government: hackers sell Dark Caracal spyware platform

Dark Caracal

Designed for government: hackers sell Dark Caracal spyware platform

Do Son January 22, 2018

According to theregister media news on January 18, the Frontier Foundation Electronic Frontier Foundation and security firm...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-14894CVSS 9.8
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload...
Admin intel📅 Updated: Sep 4, 2026
CVE-2026-85046CVSS 8.8
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code...
Admin intelCISA KEV📅 Added to KEV: Sep 4, 2026📅 Updated: Sep 3, 2026
CVE-2026-32475CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue...
Admin intel📅 Updated: Sep 2, 2026
CVE-2026-48710CVSS 6.5
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-49869CVSS 10.0
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs")...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-59822
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026