Critical Alert 1 Active Exploit Detected Today

CVE-2026-104286 — Fortinet FortiMail Path Traversal Vulnerability →

Powered by CVE Watchtower

×

TraderTraitor

TraderTraitor macOS Backdoors Target IT Service Firms CloudComputating - QSC framework

CloudComputating - QSC framework

TraderTraitor macOS Backdoors Target IT Service Firms

Do Son September 28, 2026

At a Glance Attribute Details Actor or Group TraderTraitor (aka UNC4899, Jade Sleet, PUKCHONG) Activity Type Fake...

Inside North Korea’s Cyber Mafia: How Hidden IT Workers Fuel Global Espionage and Crypto Theft DPRK cybercrime, IT workers

DPRK cybercrime, IT workers

Inside North Korea’s Cyber Mafia: How Hidden IT Workers Fuel Global Espionage and Crypto Theft

Do Son May 16, 2025

A recent report by DTEX sheds light on the sophisticated and complex cyber operations of the Democratic...

Millions Stolen: North Korea Hackers Target Blockchain Industry Google Play, Crypto Wallets Cryptocurrency Thefts

Google Play, Crypto Wallets Cryptocurrency Thefts

Millions Stolen: North Korea Hackers Target Blockchain Industry

Do Son January 14, 2025

The United States, Japan, and the Republic of Korea have joined forces to issue a stark warning...

North Korean Cyber Actors TraderTraitor Steal $308 Million in Cryptocurrency: DMM Breach Unveiled SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak

SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak

North Korean Cyber Actors TraderTraitor Steal $308 Million in Cryptocurrency: DMM Breach Unveiled

Do Son December 24, 2024

The Federal Bureau of Investigation (FBI), Department of Defense Cyber Crime Center (DC3), and Japan’s National Police...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-100382CVSS 10.0
Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
Admin intel📅 Updated: Oct 1, 2026
CVE-2026-104286CVSS 9.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
CISA KEV📅 Added to KEV: Oct 1, 2026
CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026

CVE-2026-95102CVSS 9.4
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit...
Admin intel📅 Updated: Oct 2, 2026
CVE-2026-104480CVSS 9.4
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an...
📅 Updated: Oct 2, 2026
CVE-2026-19445CVSS 9.2
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its...
📅 Updated: Oct 2, 2026
CVE-2026-96658CVSS 9.9
A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE)...
📅 Updated: Oct 2, 2026
CVE-2026-96659CVSS 9.1
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause...
📅 Updated: Oct 2, 2026
CVE-2026-86345CVSS 9.0
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client...
📅 Updated: Oct 2, 2026
CVE-2024-23564CVSS 9.1
HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application...
📅 Updated: Oct 2, 2026
CVE-2026-103764CVSS 9.3
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read...
📅 Updated: Oct 1, 2026