Red Heron

Kapibala WordPress Exploitation Attacks Hit Governments Diagram showing Kapibala WordPress exploitation attacks and Kapibala WordPress exploitation timeline

Diagram showing Kapibala WordPress exploitation attacks and Kapibala WordPress exploitation timeline

Kapibala WordPress Exploitation Attacks Hit Governments

Do Son September 22, 2026

At a Glance Attribute Details Actor or Group Suspected Chinese cyber actor (associated with Red Heron) Activity...

Gitea RCE Vulnerability Exploited in the Wild Diagram of Gitea RCE vulnerability and Gitea RCE vulnerability exploited in attacks

Gitea RCE Vulnerability Exploited in the Wild

Do Son September 15, 2026

Acronis Threat Research Unit researchers uncovered a state-linked espionage campaign exploiting a critical Gitea RCE vulnerability. A...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88779CVSS 8.7
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
CVE-2026-102490CVSS 8.5
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-102489CVSS 8.7
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-100382CVSS 10.0
Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
Admin intel📅 Updated: Oct 1, 2026
CVE-2026-104286CVSS 9.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
CISA KEV📅 Added to KEV: Oct 1, 2026
CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026

CVE-2026-96659CVSS 9.1
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause...
📅 Updated: Oct 6, 2026
CVE-2026-51886CVSS 9.8
langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is:...
📅 Updated: Oct 6, 2026
CVE-2026-51881CVSS 9.8
deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce...
📅 Updated: Oct 6, 2026
CVE-2026-51876CVSS 9.1
DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can...
📅 Updated: Oct 6, 2026
CVE-2026-105484CVSS 10.0
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of...
📅 Updated: Oct 6, 2026
CVE-2026-105763CVSS 9.6
Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query...
📅 Updated: Oct 6, 2026
CVE-2025-12543CVSS 9.6
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and...
📅 Updated: Oct 6, 2026
CVE-2026-102829CVSS 9.2
# Security control bypass in `@simple-git/argv-parser`: Git's `VISUAL` editor fallback is not classified as `allowUnsafeEditor` ## Report metadata...
📅 Updated: Oct 5, 2026