Mass Scanning

Vite Flaw CVE-2026-39364 Exploited to Steal Cloud Keys Vite development server vulnerability CVE-2026-39364 exploited in mass scanning to steal exposed cloud credentials and env files

Vite Flaw CVE-2026-39364 Exploited to Steal Cloud Keys

Do Son September 15, 2026

TL;DR Attackers are mass-scanning the internet for exposed Vite development servers. They abuse the Vite development server...

Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints Palo Alto SonicWall Scanning, Coordinated Reconnaissance

Palo Alto SonicWall Scanning, Coordinated Reconnaissance

Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints

Do Son December 6, 2025

A sudden surge in mass scanning activity has targeted two major enterprise security vendors, Palo Alto Networks...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93952CVSS 10.0
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2026-86860CVSS 9.3
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could...
📅 Updated: Sep 25, 2026
CVE-2026-78445CVSS 9.8
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code...
📅 Updated: Sep 24, 2026
CVE-2026-77493CVSS 9.8
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026
CVE-2026-73025CVSS 9.8
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
📅 Updated: Sep 24, 2026
CVE-2026-73009CVSS 9.8
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over...
📅 Updated: Sep 24, 2026
CVE-2026-72979CVSS 9.8
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026
CVE-2026-72982CVSS 9.8
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026
CVE-2026-72983CVSS 9.8
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a...
📅 Updated: Sep 24, 2026