SIEM

Splunk Patches 22 Flaws in Splunk Enterprise, Including Critical Patroni API Command Execution Bug Splunk Enterprise vulnerabilities CVE-2026-76268 Patroni REST API command execution and CVE-2026-76281 fixed in 10.4.3 and 10.2.7

Splunk Enterprise vulnerabilities CVE-2026-76268 Patroni REST API command execution and CVE-2026-76281 fixed in 10.4.3 and 10.2.7

Splunk Patches 22 Flaws in Splunk Enterprise, Including Critical Patroni API Command Execution Bug

Do Son October 8, 2026

TL;DR Splunk has released two advisories that fix 22 Splunk Enterprise vulnerabilities across four supported branches. The...

Graylog Flaw (CVE-2025-53106, CVSS 8.8): Privilege Escalation Via API Token Abuse Graylog Vulnerability, Privilege Escalation

Graylog Vulnerability, Privilege Escalation

Graylog Flaw (CVE-2025-53106, CVSS 8.8): Privilege Escalation Via API Token Abuse

Do Son July 2, 2025

A vulnerability was found in Graylog—a popular Security Information and Event Management (SIEM) solution. Tracked as CVE-2025-53106...

IBM QRadar SIEM Exposed by Trio of Security Flaws, Including Critical Command Execution Bug IBM QRadar, Critical Vulnerabilities

IBM QRadar, Critical Vulnerabilities

IBM QRadar SIEM Exposed by Trio of Security Flaws, Including Critical Command Execution Bug

Do Son June 21, 2025

IBM has issued a security bulletin addressing three critical vulnerabilities in its QRadar SIEM platform, a widely...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-102255CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Oct 9, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
Admin intel📅 Updated: Oct 9, 2026
CVE-2023-22894CVSS 4.9
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2016-3081CVSS 8.1
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-3306CVSS 10.0
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-5477CVSS 7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2021-3199CVSS 9.8
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2026-94504CVSS 7.2
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
Admin intel📅 Updated: Oct 7, 2026

CVE-2026-107824CVSS 9.3
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality...
📅 Updated: Oct 9, 2026
CVE-2026-108109CVSS 9.3
PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows...
📅 Updated: Oct 9, 2026
CVE-2026-78663CVSS 9.1
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets...
📅 Updated: Oct 9, 2026
CVE-2026-108157CVSS 9.2
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to...
📅 Updated: Oct 9, 2026
CVE-2026-7827CVSS 9.2
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4...
📅 Updated: Oct 9, 2026
CVE-2026-107935CVSS 9.3
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated...
📅 Updated: Oct 9, 2026
CVE-2026-104019CVSS 9.3
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x...
📅 Updated: Oct 9, 2026
CVE-2026-103956CVSS 10.0
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors...
📅 Updated: Oct 9, 2026