Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 4 of 30. 100 incidents from 4 May 2026 to 19 July 2026.
19 July 2026
- Paidwork data breach: 23.3M accounts exposed High · Breach · Closed
16 July 2026
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-58644) Critical · Patch now · Closed
- Fortinet FortiSandbox OS Command Injection Vulnerability (CVE-2026-25089) Critical · Patch now · Closed
- Fortinet FortiSandbox OS Command Injection Vulnerability (CVE-2026-39808) Critical · Patch now · Closed
15 July 2026
- Oracle E-Business Suite Improper Privilege Management Vulnerability (CVE-2026-46817) Critical · Patch now · Closed
- KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability (CVE-2023-4346) High · Patch now · Closed
- Goose Creek data breach: 6.6M accounts exposed Medium · Breach · Closed
- Fluke data breach: 821K accounts exposed Medium · Breach · Closed
14 July 2026
- Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability (CVE-2026-56164) Critical · Patch now · Closed
- SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-15409) Critical · Patch now · Closed
- Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability (CVE-2026-56155) High · Patch now · Closed
- SonicWall SMA1000 Appliances Code Injection Vulnerability (CVE-2026-15410) High · Patch now · Closed
13 July 2026
- Cisco IOS Cross-Site Request Forgery Vulnerability (CVE-2008-4128) High · Patch now · Closed
11 July 2026
- Glendale Community College data breach: 793K accounts exposed Medium · Breach · Closed
10 July 2026
- Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-56291) Critical · Patch now · Closed
- iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48939) Critical · Patch now · Closed
7 July 2026
- JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48908) Critical · Patch now · Closed
- Joomlack Page Builder Improper Access Control Vulnerability (CVE-2026-56290) Critical · Patch now · Closed
- Adobe ColdFusion Path Traversal Vulnerability (CVE-2026-48282) Critical · Patch now · Closed
- Langflow Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-55255) High · Patch now · Closed
3 July 2026
- obsidian-tc: two critical flaws let tokens reach any vault and drive-by pages access loopback server (CVE-2026-77366, CVE-2026-77363) Critical · Patch now · Closed
- Moody Bible Institute data breach: 2.3M accounts exposed Medium · Breach · Closed
1 July 2026
- Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (CVE-2026-45659) High · Patch now · Closed
29 June 2026
- SimpleHelp Authentication Bypass Vulnerability (CVE-2026-48558) Critical · Patch now · Closed
28 June 2026
- Sysco data breach: 2.7M accounts exposed Medium · Breach · Closed
26 June 2026
- American Tower data breach: 216K accounts exposed Medium · Breach · Closed
25 June 2026
- PTC Windchill and FlexPLM Improper Input Validation Vulnerability (CVE-2026-12569) Critical · Patch now · Closed
- Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-20230) High · Patch now · Closed
24 June 2026
- Madison Square Garden Sports data breach: 9.8M accounts exposed Medium · Breach · Closed
23 June 2026
- Lantronix EDS5000 Code Injection Vulnerability (CVE-2025-67038) Critical · Patch now · Closed
- Ubiquiti UniFi OS Improper Input Validation Vulnerability (CVE-2026-34910) Critical · Patch now · Closed
- Ubiquiti UniFi OS Path Traversal Vulnerability (CVE-2026-34909) Critical · Patch now · Closed
- Ubiquiti UniFi OS Improper Access Control Vulnerability (CVE-2026-34908) Critical · Patch now · Closed
20 June 2026
- JCPenney data breach: 368K accounts exposed Medium · Breach · Closed
18 June 2026
- Splunk Enterprise Missing Authentication for Critical Function Vulnerability (CVE-2026-20253) Critical · Patch now · Closed
- Operation Endgame 4.0 data breach: 4.3M accounts exposed High · Breach · Closed
- CFGI data breach: 248K accounts exposed Medium · Breach · Closed
- Ralph Lauren data breach: 139K accounts exposed Medium · Breach · Closed
16 June 2026
- Widget Factory Joomla Content Editor Improper Access Control Vulnerability (CVE-2026-48907) Critical · Patch now · Closed
15 June 2026
- LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability (CVE-2026-54420) High · Patch now · Closed
- June 2026 Stealer Logs data breach: 56.3M accounts exposed High · Breach · Closed
- Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability (CVE-2026-20262) Medium · Patch now · Closed
- Infinite Campus data breach: 137K accounts exposed Medium · Breach · Closed
- Berkadia data breach: 305K accounts exposed Medium · Breach · Closed
12 June 2026
- Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability (CVE-2026-35273) Critical · Patch now · Closed
11 June 2026
- Ivanti Sentry OS Command Injection Vulnerability (CVE-2026-10520) Critical · Patch now · Closed
10 June 2026
- University of Nottingham data breach: 454K accounts exposed Medium · Breach · Closed
9 June 2026
- Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (CVE-2026-11645) High · Patch now · Closed
- Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability (CVE-2026-20245) High · Patch now · Closed
- Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-7473) Medium · Patch now · Closed
8 June 2026
- Check Point Security Gateway Improper Authentication Vulnerability (CVE-2026-50751) Critical · Patch now · Closed
- BerriAI LiteLLM Command Injection Vulnerability (CVE-2026-42271) High · Patch now · Closed
7 June 2026
- Baker Distributing data breach: 102K accounts exposed Medium · Breach · Closed
5 June 2026
- SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability (CVE-2026-28318) High · Patch now · Closed
- BCD Travel data breach: 396K accounts exposed Medium · Breach · Closed
3 June 2026
- Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability (CVE-2026-45247) Critical · Patch now · Closed
- DentaQuest data breach: 2.6M accounts exposed Medium · Breach · Closed
2 June 2026
- Linux Kernel Improper Authentication Vulnerability (CVE-2022-0492) High · Patch now · Closed
- Android Framework Integer Overflow Vulnerability (CVE-2025-48595) High · Patch now · Closed
1 June 2026
- Oracle WebLogic Server Unspecified Vulnerability (CVE-2024-21182) High · Patch now · Closed
- Edmunds data breach: 177K accounts exposed High · Breach · Closed
30 May 2026
- Atlas Menu data breach: 63K accounts exposed High · Breach · Closed
29 May 2026
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CVE-2026-0257) Critical · Patch now · Closed
28 May 2026
- Kemper data breach: 269K accounts exposed High · Breach · Closed
- Charter data breach: 4.9M accounts exposed Medium · Breach · Closed
27 May 2026
- Nx Console Embedded Malicious Code Vulnerability (CVE-2026-48027) Critical · Patch now · Closed
- TanStack Unspecified Vulnerability (CVE-2026-45321) Critical · Patch now · Closed
- Daemon Tools Lite Embedded Malicious Code Vulnerability (CVE-2026-8398) Critical · Patch now · Closed
- Mytheresa data breach: 84K accounts exposed High · Breach · Closed
26 May 2026
- LiteSpeed cPanel Plugin Privilege Escalation Vulnerability (CVE-2026-48172) Critical · Patch now · Closed
- Ameriprise data breach: 502K accounts exposed Medium · Breach · Closed
24 May 2026
- 7-Eleven data breach: 185K accounts exposed Medium · Breach · Closed
22 May 2026
- Drupal Core SQL Injection Vulnerability (CVE-2026-9082) Critical · Patch now · Closed
21 May 2026
- Langflow Origin Validation Error Vulnerability (CVE-2025-34291) High · Patch now · Closed
- Windows93 / Myspace93 data breach: 46K accounts exposed High · Breach · Closed
- Dragonica Lunaris data breach: 126K accounts exposed High · Breach · Closed
- Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVE-2026-34926) Medium · Patch now · Closed
20 May 2026
- Microsoft Windows Buffer Overflow Vulnerability (CVE-2008-4250) Critical · Patch now · Closed
- Microsoft DirectX NULL Byte Overwrite Vulnerability (CVE-2009-1537) High · Patch now · Closed
- Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVE-2009-3459) High · Patch now · Closed
- Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2010-0249) High · Patch now · Closed
- Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2010-0806) High · Patch now · Closed
- Microsoft Defender Link Following Vulnerability (CVE-2026-41091) High · Patch now · Closed
- Microsoft Defender Denial of Service Vulnerability (CVE-2026-45498) High · Patch now · Closed
19 May 2026
- CTT data breach: 468K accounts exposed Medium · Breach · Closed
18 May 2026
- Addi data breach: 34.5M accounts exposed Medium · Breach · Closed
16 May 2026
- Gîtes de France data breach: 117K accounts exposed Medium · Breach · Closed
15 May 2026
- Microsoft Exchange Server Cross-Site Scripting Vulnerability (CVE-2026-42897) Medium · Patch now · Closed
14 May 2026
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CVE-2026-20182) Critical · Patch now · Closed
- Abrigo data breach: 711K accounts exposed Medium · Breach · Closed
13 May 2026
- Canada Life data breach: 237K accounts exposed Medium · Breach · Closed
12 May 2026
- Cushman & Wakefield data breach: 310K accounts exposed Medium · Breach · Closed
8 May 2026
- BerriAI LiteLLM SQL Injection Vulnerability (CVE-2026-42208) Critical · Patch now · Closed
- Zara data breach: 197K accounts exposed Medium · Breach · Closed
7 May 2026
- Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability (CVE-2026-6973) High · Patch now · Closed
- Woflow data breach: 447K accounts exposed Medium · Breach · Closed
6 May 2026
- Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability (CVE-2026-0300) Critical · Patch now · Closed
- LegionProxy data breach: 10K accounts exposed High · Breach · Closed
5 May 2026
- Vimeo data breach: 119K accounts exposed Medium · Breach · Closed
4 May 2026
- Reborn Gaming data breach: 126 accounts exposed Low · Breach · Closed