LAN Domain

Controversy Surrounding the .lan Domain Application ICANN gTLD applications .lan domain OpenWrt local network configuration

Do Son October 9, 2026

The Internet Corporation for Assigned Names and Numbers (ICANN) recently published its highly anticipated updated list of...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

CVE-2026-102255CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Oct 9, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
Admin intel📅 Updated: Oct 9, 2026
CVE-2023-22894CVSS 4.9
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2016-3081CVSS 8.1
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-3306CVSS 10.0
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-5477CVSS 7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2021-3199CVSS 9.8
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2026-94504CVSS 7.2
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
Admin intel📅 Updated: Oct 7, 2026

CVE-2026-107824CVSS 9.3
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality...
📅 Updated: Oct 9, 2026
CVE-2026-108109CVSS 9.3
PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows...
📅 Updated: Oct 9, 2026
CVE-2026-78663CVSS 9.1
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets...
📅 Updated: Oct 9, 2026
CVE-2026-108157CVSS 9.2
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to...
📅 Updated: Oct 9, 2026
CVE-2026-7827CVSS 9.2
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4...
📅 Updated: Oct 9, 2026
CVE-2026-107935CVSS 9.3
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated...
📅 Updated: Oct 9, 2026
CVE-2026-104019CVSS 9.3
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x...
📅 Updated: Oct 9, 2026
CVE-2026-103956CVSS 10.0
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors...
📅 Updated: Oct 9, 2026