Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 5 of 30. 100 incidents from 17 February 2026 to 3 May 2026.
3 May 2026
- Marcus & Millichap data breach: 1.8M accounts exposed Medium · Breach · Closed
2 May 2026
- ZenBusiness data breach: 5.1M accounts exposed Medium · Breach · Closed
1 May 2026
- Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-31431) High · Patch now · Closed
- Aman data breach: 215K accounts exposed Medium · Breach · Closed
30 April 2026
28 April 2026
- ConnectWise ScreenConnect Path Traversal Vulnerability (CVE-2024-1708) High · Patch now · Closed
- Microsoft Windows Protection Mechanism Failure Vulnerability (CVE-2026-32202) Medium · Patch now · Closed
27 April 2026
- ADT data breach: 5.5M accounts exposed Medium · Breach · Closed
- Pitney Bowes data breach: 8.2M accounts exposed Medium · Breach · Closed
26 April 2026
- Udemy data breach: 1.4M accounts exposed Medium · Breach · Closed
24 April 2026
- Samsung MagicINFO 9 Server Path Traversal Vulnerability (CVE-2024-7399) Critical · Patch now · Closed
- SimpleHelp Missing Authorization Vulnerability (CVE-2024-57726) Critical · Patch now · Closed
- D-Link DIR-823X Command Injection Vulnerability (CVE-2025-29635) High · Patch now · Closed
- SimpleHelp Path Traversal Vulnerability (CVE-2024-57728) High · Patch now · Closed
- Carnival data breach: 7.5M accounts exposed Medium · Breach · Closed
23 April 2026
- Marimo Remote Code Execution Vulnerability (CVE-2026-39987) Critical · Patch now · Closed
22 April 2026
- Microsoft Defender Insufficient Granularity of Access Control Vulnerability (CVE-2026-33825) High · Patch now · Closed
20 April 2026
- Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability (CVE-2025-32975) Critical · Patch now · Closed
- Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-20133) High · Patch now · Closed
- Kentico Xperience Path Traversal Vulnerability (CVE-2025-2749) High · Patch now · Closed
- PaperCut NG/MF Improper Authentication Vulnerability (CVE-2023-27351) High · Patch now · Closed
- Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability (CVE-2026-20128) High · Patch now · Closed
- JetBrains TeamCity Relative Path Traversal Vulnerability (CVE-2024-27199) High · Patch now · Closed
- Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability (CVE-2026-20122) Medium · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (CVE-2025-48700) Medium · Patch now · Closed
17 April 2026
- Amtrak data breach: 2.1M accounts exposed Medium · Breach · Closed
16 April 2026
- Apache ActiveMQ Improper Input Validation Vulnerability (CVE-2026-34197) High · Patch now · Closed
- McGraw Hill data breach: 13.5M accounts exposed Medium · Breach · Closed
14 April 2026
- Microsoft Office Remote Code Execution (CVE-2009-0238) High · Patch now · Closed
- Microsoft SharePoint Server Improper Input Validation Vulnerability (CVE-2026-32201) Medium · Patch now · Closed
13 April 2026
- Fortinet FortiClient EMS SQL Injection Vulnerability (CVE-2026-21643) Critical · Patch now · Closed
- Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability (CVE-2012-1854) High · Patch now · Closed
- Microsoft Windows Link Following Vulnerability (CVE-2025-60710) High · Patch now · Closed
- Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability (CVE-2023-21529) High · Patch now · Closed
- Microsoft Windows Out-of-Bounds Read Vulnerability (CVE-2023-36424) High · Patch now · Closed
- Adobe Acrobat Use-After-Free Vulnerability (CVE-2020-9715) High · Patch now · Closed
- Adobe Acrobat and Reader Prototype Pollution Vulnerability (CVE-2026-34621) High · Patch now · Closed
12 April 2026
- Hallmark data breach: 1.7M accounts exposed Medium · Breach · Closed
8 April 2026
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2026-1340) Critical · Patch now · Closed
- My Lovely AI data breach: 106K accounts exposed High · Breach · Closed
6 April 2026
- Fortinet FortiClient EMS Improper Access Control Vulnerability (CVE-2026-35616) Critical · Patch now · Closed
4 April 2026
- SongTrivia2 data breach: 291K accounts exposed High · Breach · Closed
- Crunchyroll data breach: 1.2M accounts exposed Medium · Breach · Closed
2 April 2026
- TrueConf Client Download of Code Without Integrity Check Vulnerability (CVE-2026-3502) High · Patch now · Closed
1 April 2026
- Google Dawn Use-After-Free Vulnerability (CVE-2026-5281) High · Patch now · Closed
- SUCCESS data breach: 253K accounts exposed High · Breach · Closed
31 March 2026
- Cuties AI data breach: 144K accounts exposed High · Breach · Closed
30 March 2026
- Citrix NetScaler Out-of-Bounds Read Vulnerability (CVE-2026-3055) Critical · Patch now · Closed
27 March 2026
- F5 BIG-IP Stack-Based Buffer Overflow Vulnerability (CVE-2025-53521) Critical · Patch now · Closed
- BreachForums Version 5 data breach: 339K accounts exposed High · Breach · Closed
26 March 2026
- Aquasecurity Trivy Embedded Malicious Code Vulnerability (CVE-2026-33634) High · Patch now · Closed
- Sound Radix data breach: 292K accounts exposed High · Breach · Closed
- Scuf Gaming data breach: 128K accounts exposed High · Breach · Closed
25 March 2026
- Langflow Code Injection Vulnerability (CVE-2026-33017) Critical · Patch now · Closed
23 March 2026
- RuneScape Boards data breach: 222K accounts exposed High · Breach · Closed
20 March 2026
- Craft CMS Code Injection Vulnerability (CVE-2025-32432) Critical · Patch now · Closed
- Laravel Livewire Code Injection Vulnerability (CVE-2025-54068) Critical · Patch now · Closed
- Apple Multiple Products Improper Locking Vulnerability (CVE-2025-43510) High · Patch now · Closed
- Apple Multiple Products Buffer Overflow Vulnerability (CVE-2025-31277) High · Patch now · Closed
- Apple Multiple Products Classic Buffer Overflow Vulnerability (CVE-2025-43520) Medium · Patch now · Closed
19 March 2026
18 March 2026
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-20963) Critical · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability (CVE-2025-66376) Medium · Patch now · Closed
- Aura data breach: 903K accounts exposed Medium · Breach · Closed
16 March 2026
- Wing FTP Server Information Disclosure Vulnerability (CVE-2025-47813) Medium · Patch now · Closed
15 March 2026
- Baydöner data breach: 1.3M accounts exposed High · Breach · Closed
- Divine Skins data breach: 105K accounts exposed Medium · Breach · Closed
13 March 2026
- Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability (CVE-2026-3910) High · Patch now · Closed
- Google Skia Out-of-Bounds Write Vulnerability (CVE-2026-3909) High · Patch now · Closed
11 March 2026
- n8n Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2025-68613) High · Patch now · Closed
9 March 2026
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (CVE-2025-26399) Critical · Patch now · Closed
- Omnissa Workspace ONE Server-Side Request Forgery (CVE-2021-22054) High · Patch now · Closed
- Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability (CVE-2026-1603) High · Patch now · Closed
5 March 2026
- Hikvision Multiple Products Improper Authentication Vulnerability (CVE-2017-7921) Critical · Patch now · Closed
- Rockwell Multiple Products Insufficient Protected Credentials Vulnerability (CVE-2021-22681) Critical · Patch now · Closed
- Apple Multiple products Use-After-Free Vulnerability (CVE-2023-43000) High · Patch now · Closed
- Apple Multiple Products Integer Overflow or Wraparound Vulnerability (CVE-2021-30952) High · Patch now · Closed
- Apple iOS and iPadOS Use-After-Free Vulnerability (CVE-2023-41974) High · Patch now · Closed
3 March 2026
- Broadcom VMware Aria Operations Command Injection Vulnerability (CVE-2026-22719) High · Patch now · Closed
- Qualcomm Multiple Chipsets Memory Corruption Vulnerability (CVE-2026-21385) High · Patch now · Closed
- Provecho data breach: 712K accounts exposed Medium · Breach · Closed
2 March 2026
- Quitbro data breach: 22K accounts exposed High · Breach · Closed
- KomikoAI data breach: 1.1M accounts exposed Medium · Breach · Closed
- Lovora data breach: 495K accounts exposed Medium · Breach · Closed
26 February 2026
- Odido data breach: 6.1M accounts exposed High · Breach · Closed
25 February 2026
- Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability (CVE-2026-20127) Critical · Patch now · Closed
- Cisco SD-WAN Path Traversal Vulnerability (CVE-2022-20775) High · Patch now · Closed
- Canadian Tire data breach: 38.3M accounts exposed High · Breach · Closed
24 February 2026
- Soliton Systems K.K FileZen OS Command Injection Vulnerability (CVE-2026-25108) High · Patch now · Closed
22 February 2026
- CarGurus data breach: 12.5M accounts exposed Medium · Breach · Closed
20 February 2026
- RoundCube Webmail Deserialization of Untrusted Data Vulnerability (CVE-2025-49113) High · Patch now · Closed
- RoundCube Webmail Cross-site Scripting Vulnerability (CVE-2025-68461) Medium · Patch now · Closed
- CarMax data breach: 431K accounts exposed Medium · Breach · Closed
18 February 2026
- GitLab Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-22175) Critical · Patch now · Closed
- Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability (CVE-2026-22769) Critical · Patch now · Closed
- Figure data breach: 967K accounts exposed Medium · Breach · Closed
17 February 2026
- Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability (CVE-2020-7796) Critical · Patch now · Closed
- TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-7694) High · Patch now · Closed
- Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability (CVE-2008-0015) High · Patch now · Closed
- Google Chromium CSS Use-After-Free Vulnerability (CVE-2026-2441) High · Patch now · Closed