Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 6 of 30. 100 incidents from 30 October 2025 to 17 February 2026.
17 February 2026
- Canada Goose data breach: 581K accounts exposed High · Breach · Closed
16 February 2026
- APOIA.se data breach: 450K accounts exposed Medium · Breach · Closed
- University of Pennsylvania data breach: 623K accounts exposed Medium · Breach · Closed
13 February 2026
- BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability (CVE-2026-1731) Critical · Patch now · Closed
12 February 2026
- Microsoft Configuration Manager SQL Injection Vulnerability (CVE-2024-43468) Critical · Patch now · Closed
- SolarWinds Web Help Desk Security Control Bypass Vulnerability (CVE-2025-40536) Critical · Patch now · Closed
- Apple Multiple Buffer Overflow Vulnerability (CVE-2026-20700) High · Patch now · Closed
- Notepad++ Download of Code Without Integrity Check Vulnerability (CVE-2025-15556) High · Patch now · Closed
10 February 2026
- Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability (CVE-2026-21513) High · Patch now · Closed
- Microsoft Windows Shell Protection Mechanism Failure Vulnerability (CVE-2026-21510) High · Patch now · Closed
- Microsoft Windows Improper Privilege Management Vulnerability (CVE-2026-21533) High · Patch now · Closed
- Microsoft Windows Type Confusion Vulnerability (CVE-2026-21519) High · Patch now · Closed
- Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability (CVE-2026-21514) High · Patch now · Closed
- Microsoft Windows NULL Pointer Dereference Vulnerability (CVE-2026-21525) Medium · Patch now · Closed
- Association Nationale des Premiers Secours data breach: 5600 accounts exposed Low · Breach · Closed
- Toy Battles data breach: 1017 accounts exposed Low · Breach · Closed
6 February 2026
- Substack data breach: 663K accounts exposed Medium · Breach · Closed
5 February 2026
- React Native Community CLI OS Command Injection Vulnerability (CVE-2025-11953) Critical · Patch now · Closed
- SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability (CVE-2026-24423) Critical · Patch now · Closed
- Betterment data breach: 1.4M accounts exposed Medium · Breach · Closed
3 February 2026
- Sangoma FreePBX Improper Authentication Vulnerability (CVE-2019-19006) Critical · Patch now · Closed
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (CVE-2025-40551) Critical · Patch now · Closed
- GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-39935) High · Patch now · Closed
- Sangoma FreePBX OS Command Injection Vulnerability (CVE-2025-64328) High · Patch now · Closed
31 January 2026
- Panera Bread data breach: 5.1M accounts exposed Medium · Breach · Closed
29 January 2026
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2026-1281) Critical · Patch now · Closed
27 January 2026
- Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-24858) Critical · Patch now · Closed
- SoundCloud data breach: 29.8M accounts exposed Medium · Breach · Closed
26 January 2026
- SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2025-52691) Critical · Patch now · Closed
- SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-23760) Critical · Patch now · Closed
- GNU InetUtils Argument Injection Vulnerability (CVE-2026-24061) Critical · Patch now · Closed
- Linux Kernel Integer Overflow Vulnerability (CVE-2018-14634) High · Patch now · Closed
- Microsoft Office Security Feature Bypass Vulnerability (CVE-2026-21509) High · Patch now · Closed
23 January 2026
- Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability (CVE-2024-37079) Critical · Patch now · Closed
22 January 2026
- Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability (CVE-2025-68645) High · Patch now · Closed
- Versa Concerto Improper Authentication Vulnerability (CVE-2025-34026) High · Patch now · Closed
- Vite Vitejs Improper Access Control Vulnerability (CVE-2025-31125) High · Patch now · Closed
- Prettier eslint-config-prettier Embedded Malicious Code Vulnerability (CVE-2025-54313) High · Patch now · Closed
- Crunchbase data breach: 559K accounts exposed Medium · Breach · Closed
21 January 2026
- Cisco Unified Communications Products Code Injection Vulnerability (CVE-2026-20045) Critical · Patch now · Closed
- Under Armour data breach: 72.7M accounts exposed High · Breach · Closed
19 January 2026
- Raaga data breach: 10.2M accounts exposed High · Breach · Closed
18 January 2026
- Pass'Sport data breach: 6.4M accounts exposed Medium · Breach · Closed
13 January 2026
- Microsoft Windows Information Disclosure Vulnerability (CVE-2026-20805) Medium · Patch now · Closed
12 January 2026
- Gogs Path Traversal Vulnerability (CVE-2025-8110) High · Patch now · Closed
11 January 2026
- Instagram data breach: 6.2M accounts exposed Medium · Breach · Closed
10 January 2026
- BreachForums (2025) data breach: 672K accounts exposed High · Breach · Closed
7 January 2026
- Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability (CVE-2025-37164) Critical · Patch now · Closed
- Microsoft Office PowerPoint Code Injection Vulnerability (CVE-2009-0556) High · Patch now · Closed
6 January 2026
- WhiteDate data breach: 20K accounts exposed High · Breach · Closed
29 December 2025
27 December 2025
- WIRED data breach: 2.4M accounts exposed Medium · Breach · Closed
26 December 2025
- Utair data breach: 401K accounts exposed Medium · Breach · Closed
24 December 2025
- Медицинская лаборатория Гемотест (Gemotest) data breach: 6.3M accounts exposed High · Breach · Closed
22 December 2025
- Digiever DS-2105 Pro Missing Authorization Vulnerability (CVE-2023-52163) High · Patch now · Closed
19 December 2025
- WatchGuard Firebox Out of Bounds Write Vulnerability (CVE-2025-14733) Critical · Patch now · Closed
18 December 2025
- The Botting Network data breach: 96K accounts exposed High · Breach · Closed
- AUTOSUR data breach: 487K accounts exposed Medium · Breach · Closed
17 December 2025
- ASUS Live Update Embedded Malicious Code Vulnerability (CVE-2025-59374) Critical · Patch now · Closed
- Cisco Multiple Products Improper Input Validation Vulnerability (CVE-2025-20393) Critical · Patch now · Closed
- Web Hosting Talk data breach: 515K accounts exposed High · Breach · Closed
- SonicWall SMA1000 Missing Authorization Vulnerability (CVE-2025-40602) Medium · Patch now · Closed
16 December 2025
- Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability (CVE-2025-59718) Critical · Patch now · Closed
15 December 2025
- Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability (CVE-2025-14611) Critical · Patch now · Closed
- Apple Multiple Products Use-After-Free WebKit Vulnerability (CVE-2025-43529) High · Patch now · Closed
12 December 2025
- Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-4063) High · Patch now · Closed
- Google Chromium Out of Bounds Memory Access Vulnerability (CVE-2025-14174) High · Patch now · Closed
11 December 2025
- OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability (CVE-2025-58360) Critical · Patch now · Closed
9 December 2025
- RARLAB WinRAR Path Traversal Vulnerability (CVE-2025-6218) High · Patch now · Closed
- Microsoft Windows Use After Free Vulnerability (CVE-2025-62221) High · Patch now · Closed
8 December 2025
- D-Link Routers Buffer Overflow Vulnerability (CVE-2022-37055) Critical · Patch now · Closed
- Array Networks ArrayOS AG OS Command Injection Vulnerability (CVE-2025-66644) Critical · Patch now · Closed
6 December 2025
- KinoKong data breach: 817K accounts exposed High · Breach · Closed
5 December 2025
- Meta React Server Components Remote Code Execution Vulnerability (CVE-2025-55182) Critical · Patch now · Closed
3 December 2025
- OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-26828) High · Patch now · Closed
2 December 2025
- Android Framework Privilege Escalation Vulnerability (CVE-2025-48572) High · Patch now · Closed
- Android Framework Information Disclosure Vulnerability (CVE-2025-48633) Medium · Patch now · Closed
1 December 2025
- Zilvia.net data breach: 287K accounts exposed High · Breach · Closed
28 November 2025
- OpenPLC ScadaBR Cross-site Scripting Vulnerability (CVE-2021-26829) Medium · Patch now · Closed
27 November 2025
- China Software Developer Network data breach: 6.4M accounts exposed High · Breach · Closed
23 November 2025
- ADDA data breach: 1.8M accounts exposed High · Breach · Closed
- CodeStepByStep data breach: 103K accounts exposed Medium · Breach · Closed
21 November 2025
- Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability (CVE-2025-61757) Critical · Patch now · Closed
20 November 2025
- Vultr data breach: 187K accounts exposed Medium · Breach · Closed
- Eurofiber data breach: 10K accounts exposed Medium · Breach · Closed
- Beckett Collectibles data breach: 1.0M accounts exposed Medium · Breach · Closed
- International Kiteboarding Organization data breach: 340K accounts exposed Medium · Breach · Closed
19 November 2025
- Google Chromium V8 Type Confusion Vulnerability (CVE-2025-13223) High · Patch now · Closed
18 November 2025
- Fortinet FortiWeb OS Command Injection Vulnerability (CVE-2025-58034) High · Patch now · Closed
14 November 2025
- Fortinet FortiWeb Path Traversal Vulnerability (CVE-2025-64446) Critical · Patch now · Closed
13 November 2025
- Operation Endgame 3.0 data breach: 2.0M accounts exposed High · Breach · Closed
12 November 2025
- Gladinet Triofox Improper Access Control Vulnerability (CVE-2025-12480) Critical · Patch now · Closed
- WatchGuard Firebox Out-of-Bounds Write Vulnerability (CVE-2025-9242) Critical · Patch now · Closed
- Microsoft Windows Race Condition Vulnerability (CVE-2025-62215) High · Patch now · Closed
10 November 2025
- Samsung Mobile Devices Out-of-Bounds Write Vulnerability (CVE-2025-21042) Critical · Patch now · Closed
8 November 2025
- TISZA Világ data breach: 198K accounts exposed High · Breach · Closed
6 November 2025
- Synthient Credential Stuffing Threat Data data breach: 2.0B accounts exposed Critical · Breach · Closed
4 November 2025
- CWP Control Web Panel OS Command Injection Vulnerability (CVE-2025-48703) Critical · Patch now · Closed
- Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability (CVE-2025-11371) High · Patch now · Closed
30 October 2025
- XWiki Platform Eval Injection Vulnerability (CVE-2025-24893) Critical · Patch now · Closed