Fake Control 1.0

Copybara Android RAT Spreads Through N26 Vishing Scam in Italy Copybara Android RAT delivered through N26 vishing and Fake Control 1.0 phishing panel

Copybara Android RAT Spreads Through N26 Vishing Scam in Italy

Do Son July 30, 2026

At a glance Malware family Copybara (Android RAT) Operators Not attributed; kit uses Portuguese-language identifiers Targets N26...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2012-20002CVSS 8.7
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2012-20003CVSS 5.1
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2026-114625CVSS 9.9
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
CISA KEV📅 Added to KEV: Oct 23, 2026
CVE-2026-109619CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not...
Admin intel📅 Updated: Oct 22, 2026

CVE-2026-105944CVSS 10.0
Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts...
📅 Updated: Oct 23, 2026
CVE-2026-93479CVSS 9.2
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and...
📅 Updated: Oct 23, 2026
CVE-2026-111497CVSS 9.2
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all...
📅 Updated: Oct 23, 2026
CVE-2026-115893CVSS 9.9
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64...
📅 Updated: Oct 23, 2026
CVE-2026-115889CVSS 9.9
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value...
📅 Updated: Oct 23, 2026
CVE-2026-111816CVSS 9.2
Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because...
📅 Updated: Oct 23, 2026
CVE-2021-48014CVSS 9.3
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write...
📅 Updated: Oct 23, 2026
CVE-2025-58627CVSS 9.8
Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control...
📅 Updated: Oct 23, 2026