Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 3 of 30. 100 incidents from 20 July 2026 to 22 September 2026.
22 September 2026
- F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) Critical · Patch now · Closed
- Check Point Multiple Products Path Traversal Vulnerability (CVE-2026-93616) Critical · Patch now · Closed
- Check Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102) Critical · Patch now · Closed
- Graphalgo campaign: malicious Terraform providers and Go modules deliver targeted RAT via hash-triggered payload (no CVE) High · Supply chain · Closed
- LimeLeads data breach: 17.8M accounts exposed Medium · Breach · Closed
21 September 2026
- Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (CVE-2026-7273) High · Patch now · Closed
- Burger King Russia data breach: 3.2M accounts exposed Medium · Breach · Closed
18 September 2026
- Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-39682) Critical · Patch now · Closed
- Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2026-53266) High · Patch now · Closed
- Linux Kernel Race Condition Vulnerability (CVE-2025-39964) Medium · Patch now · Closed
16 September 2026
- Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVE-2026-76460) Critical · Patch now · Closed
- Google Pixel Improper Authorization Vulnerability (CVE-2026-58704) High · Patch now · Closed
- Acronis Backup Incorrect Default Permissions Vulnerability (CVE-2026-87886) High · Patch now · Closed
14 September 2026
- Cisco Secure Email Gateway SQL Injection Vulnerability (CVE-2026-76461) Critical · Patch now · Closed
- Cisco Secure Email Gateway and Secure Email and Web Manager: hardening release fixes multiple critical vulnerabilities including actively exploited SQL injection and arbitrary file write (CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443) Critical · Patch now · Closed
13 September 2026
- Chess.com (2026) data breach: 4.7M accounts exposed Medium · Breach · Closed
11 September 2026
- ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability (CVE-2026-84869) Critical · Patch now · Closed
- GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (CVE-2026-85706) Critical · Patch now · Closed
- JFrog Artifactory Incorrect Authorization Vulnerability (CVE-2026-42016) High · Patch now · Closed
- JFrog Artifactory Improper Authentication Vulnerability (CVE-2026-42018) High · Patch now · Closed
10 September 2026
- MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability (CVE-2026-86060) Critical · Patch now · Closed
- MikroTik RouterOS Missing Authentication for Critical Function Vulnerability (CVE-2026-67277) High · Patch now · Closed
- McKesson data breach: 6.4M accounts exposed High · Breach · Closed
9 September 2026
- Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-19490) Critical · Patch now · Closed
- Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (CVE-2025-25249) Critical · Patch now · Closed
- Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-20079) Critical · Patch now · Closed
- AfD data breach: 345K accounts exposed High · Breach · Closed
- PingCAP (TiDB Cloud): Extortion group FulcrumSec used stolen service account credentials to access internal systems, copying business data and source code High · Breach · Closed
- Google Chromium V8 Out of Bounds Write Vulnerability (CVE-2026-87491) High · Patch now · Closed
8 September 2026
- Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2026-75650) Critical · Patch now · Closed
- N-able N-central Static Code Injection Vulnerability (CVE-2026-86218) Critical · Patch now · Closed
- Microsoft Windows Link Following Vulnerability (CVE-2026-81963) High · Patch now · Closed
- Microsoft Windows Heap-Based Buffer Overflow Vulnerability (CVE-2026-85880) High · Patch now · Closed
- pub.dev: universal_file_viewer 0.1.5 Flutter package contains XCSSET macOS malware Medium · Supply chain · Closed
7 September 2026
5 September 2026
- Magento Open Source / Adobe Commerce: unauthenticated RCE zero-day 'StyleSmuggler' actively exploited (CVE-2026-75650) Critical · Patch now · Closed
4 September 2026
- Google Chromium V8 Type Confusion Vulnerability (CVE-2026-85046) High · Patch now · Closed
2 September 2026
- Kestra OSS OS Command Injection Vulnerability (CVE-2026-49869) Critical · Patch now · Closed
- JFrog Artifactory Improper Authentication Vulnerability (CVE-2026-82329) Critical · Patch now · Closed
- Sangoma Switchvox SQL Injection Vulnerability (CVE-2026-9586) Critical · Patch now · Closed
- SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-83548) Critical · Patch now · Closed
- BerriAI LiteLLM Improper Authentication Vulnerability (CVE-2026-59822) High · Patch now · Closed
- SonicWall SMA1000 Appliances OS Command Injection Vulnerability (CVE-2026-83549) High · Patch now · Closed
- Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVE-2026-48710) Medium · Patch now · Closed
- Manchester Airports Group data breach: 8.8M accounts exposed Medium · Breach · Closed
1 September 2026
- Questel data breach: 1.2M accounts exposed Medium · Breach · Closed
31 August 2026
- PaperCut NG/MF Unsafe Reflection Vulnerability (CVE-2026-82078) Critical · Patch now · Closed
- PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (CVE-2026-81578) Critical · Patch now · Closed
27 August 2026
- ownCloud Improper Authentication Vulnerability (CVE-2023-49105) Critical · Patch now · Closed
- Linux Kernel Unspecified Vulnerability (CVE-2026-53362) High · Patch now · Closed
- JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (CVE-2026-66384) Medium · Patch now · Closed
26 August 2026
- Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (CVE-2021-23758) Critical · Patch now · Closed
- Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-8452) Critical · Patch now · Closed
- Red Hat Libuser Race Condition Vulnerability (CVE-2015-3246) High · Patch now · Closed
- Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (CVE-2015-5287) High · Patch now · Closed
- Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2022-0995) High · Patch now · Closed
- Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2019-1068) High · Patch now · Closed
25 August 2026
- Gitea Code Injection Vulnerability (CVE-2026-60004) Critical · Patch now · Closed
- Carhartt data breach: 12.9M accounts exposed Medium · Breach · Closed
24 August 2026
- Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (CVE-2026-21962) Critical · Patch now · Closed
23 August 2026
- NIUS data breach: 6090 accounts exposed High · Breach · Closed
22 August 2026
- Golf Canada data breach: 568K accounts exposed Medium · Breach · Closed
21 August 2026
- Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (CVE-2026-73570) High · Patch now · Closed
20 August 2026
- TrueConf Server Code Injection Vulnerability (CVE-2026-72530) Critical · Patch now · Closed
- TrueConf Server Missing Authentication for Critical Function Vulnerability (CVE-2026-72529) Critical · Patch now · Closed
19 August 2026
- MLflow Server-Side Request Forgery Vulnerability (CVE-2026-64849) Critical · Patch now · Closed
- Fanlore data breach: 144K accounts exposed High · Breach · Closed
- Oz Hair and Beauty data breach: 2.0M accounts exposed Medium · Breach · Closed
18 August 2026
- Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (CVE-2026-33824) Critical · Patch now · Closed
- Broadcom VMware vCenter Path Traversal Vulnerability (CVE-2026-59310) Critical · Patch now · Closed
- Microsoft SharePoint Weak Authentication Vulnerability (CVE-2026-55040) Critical · Patch now · Closed
- Apple macOS Improper Authentication Vulnerability (CVE-2026-65400) Critical · Patch now · Closed
17 August 2026
- Ray-Project Ray Code Injection Vulnerability (CVE-2025-62593) High · Patch now · Closed
13 August 2026
- RingCentral data breach: 1.6M accounts exposed Medium · Breach · Closed
12 August 2026
- Sharecare data breach: 318K accounts exposed Medium · Breach · Closed
11 August 2026
- Metabase SQL Injection Vulnerability (CVE-2026-72898) Critical · Patch now · Closed
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (CVE-2026-20349) High · Patch now · Closed
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (CVE-2026-68820) High · Patch now · Closed
9 August 2026
- Alcon data breach: 218K accounts exposed Medium · Breach · Closed
8 August 2026
- Brinks Home data breach: 732K accounts exposed High · Breach · Closed
7 August 2026
- Progress LoadMaster Command Injection Vulnerability (CVE-2026-8037) Critical · Patch now · Closed
- Exact Sciences data breach: 10.9M accounts exposed High · Breach · Closed
5 August 2026
- JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (CVE-2026-63077) Critical · Patch now · Closed
- Inter-Con Security data breach: 276K accounts exposed Medium · Breach · Closed
4 August 2026
- IBM Langflow Code Injection Vulnerability (CVE-2026-9198) Critical · Patch now · Closed
- N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-18556) High · Patch now · Closed
- Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486) High · Patch now · Closed
3 August 2026
- N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-18577) High · Patch now · Closed
1 August 2026
- SplitVPN data breach: 865K accounts exposed High · Breach · Closed
29 July 2026
- Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (CVE-2026-20316) Medium · Patch now · Closed
28 July 2026
- Houston City College data breach: 831K accounts exposed Medium · Breach · Closed
27 July 2026
- Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability (CVE-2026-16812) Critical · Patch now · Closed
- Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-68686) Medium · Patch now · Closed
22 July 2026
- Check Point SmartConsole Improper Authentication Vulnerability (CVE-2026-16232) Critical · Patch now · Closed
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-50522) Critical · Patch now · Closed
21 July 2026
- WordPress Core Interpretation Conflict Vulnerability (CVE-2026-63030) Critical · Patch now · Closed
- Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-0770) Critical · Patch now · Closed
- DD-WRT Stack-Based Buffer Overflow Vulnerability (CVE-2021-27137) High · Patch now · Closed
- WordPress Core SQL Injection Vulnerability (CVE-2026-60137) Medium · Patch now · Closed
20 July 2026
- Suno data breach: 55.3M accounts exposed High · Breach · Closed