Log4j

Public Disclosure: Unpatched Log4j RCE Flaw in FilteredObjectInputStream, No CVE Assigned Log4j vulnerability enabling unauthenticated remote code execution via FilteredObjectInputStream deserialization, publicly disclosed on Apache issue tracker

Log4j vulnerability enabling unauthenticated remote code execution via FilteredObjectInputStream deserialization, publicly disclosed on Apache issue tracker

Public Disclosure: Unpatched Log4j RCE Flaw in FilteredObjectInputStream, No CVE Assigned

Do Son August 26, 2026

Update 3: Piotr Karwasz, a member of the Apache Software Foundation, stated that this alert re-covers an...

Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption CVE-2022-23307 Log4j TLS Bypass, Socket Appender Vulnerability

CVE-2022-23307 Log4j TLS Bypass, Socket Appender Vulnerability

Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption

Do Son December 19, 2025

The Apache Software Foundation has released a security update for its widely used Log4j logging library, addressing...

Log4j Exploited Again: New Campaign Targets Vulnerable Systems with Crypto-Mining and Backdoors hackerbot-claw campaign Cisco RCE Exploit CVE-2026-20045 SonicWall VPN, Akira Ransomware Nobelium Apache Tomcat, Apache Camel

hackerbot-claw campaign Cisco RCE Exploit CVE-2026-20045 SonicWall VPN, Akira Ransomware Nobelium Apache Tomcat, Apache Camel

Log4j Exploited Again: New Campaign Targets Vulnerable Systems with Crypto-Mining and Backdoors

Do Son August 21, 2024

Despite its discovery over two years ago, the Log4j vulnerability, known as Log4Shell (CVE-2021-44228), continues to pose...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-32475CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue...
Admin intel📅 Updated: Sep 2, 2026
CVE-2026-48710CVSS 6.5
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-49869CVSS 10.0
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs")...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-59822CVSS 8.8
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-0768CVSS 9.8
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-35029
### Impact The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into...
Admin intel📅 Updated: Sep 1, 2026