Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 7 of 30. 100 incidents from 7 July 2025 to 30 October 2025.
30 October 2025
28 October 2025
- Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability (CVE-2025-6205) Critical · Patch now · Closed
- Dassault Systèmes DELMIA Apriso Code Injection Vulnerability (CVE-2025-6204) High · Patch now · Closed
27 October 2025
- MyVidster (2025) data breach: 3.9M accounts exposed Medium · Breach · Closed
24 October 2025
- Adobe Commerce and Magento Improper Input Validation Vulnerability (CVE-2025-54236) Critical · Patch now · Closed
- Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability (CVE-2025-59287) Critical · Patch now · Closed
22 October 2025
21 October 2025
- Synthient Stealer Log Threat Data data breach: 183.0M accounts exposed Critical · Breach · Closed
20 October 2025
- Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2025-2746) Critical · Patch now · Closed
- Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2025-2747) Critical · Patch now · Closed
- Apple Multiple Products Unspecified Vulnerability (CVE-2022-48503) High · Patch now · Closed
- Microsoft Windows SMB Client Improper Access Control Vulnerability (CVE-2025-33073) High · Patch now · Closed
- Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-61884) High · Patch now · Closed
16 October 2025
- Prosper data breach: 17.6M accounts exposed Medium · Breach · Closed
15 October 2025
- Adobe Experience Manager Forms Code Execution Vulnerability (CVE-2025-54253) Critical · Patch now · Closed
- Hello Cake data breach: 22K accounts exposed High · Breach · Closed
14 October 2025
- SKYSEA Client View Improper Authentication Vulnerability (CVE-2016-7836) Critical · Patch now · Closed
- Microsoft Windows Untrusted Pointer Dereference Vulnerability (CVE-2025-24990) High · Patch now · Closed
- Microsoft Windows Improper Access Control Vulnerability (CVE-2025-59230) High · Patch now · Closed
- IGEL OS Use of a Key Past its Expiration Date Vulnerability (CVE-2025-47827) Medium · Patch now · Closed
11 October 2025
- Vietnam Airlines data breach: 7.3M accounts exposed Medium · Breach · Closed
9 October 2025
- Grafana Path Traversal Vulnerability (CVE-2021-43798) High · Patch now · Closed
7 October 2025
- Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (CVE-2025-27915) Medium · Patch now · Closed
- Adpost data breach: 3.3M accounts exposed Medium · Breach · Closed
6 October 2025
- Mozilla Multiple Products Remote Code Execution Vulnerability (CVE-2010-3765) Critical · Patch now · Closed
- Oracle E-Business Suite Unspecified Vulnerability (CVE-2025-61882) Critical · Patch now · Closed
- Linux Kernel Heap Out-of-Bounds Write Vulnerability (CVE-2021-22555) High · Patch now · Closed
- Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability (CVE-2010-3962) High · Patch now · Closed
- Microsoft Windows Privilege Escalation Vulnerability (CVE-2021-43226) High · Patch now · Closed
- Microsoft Windows Out-of-Bounds Write Vulnerability (CVE-2013-3918) High · Patch now · Closed
- Microsoft Windows Remote Code Execution Vulnerability (CVE-2011-3402) High · Patch now · Closed
4 October 2025
- Artists&Clients data breach: 95K accounts exposed High · Breach · Closed
3 October 2025
- Latest Pilot Jobs data breach: 118K accounts exposed High · Breach · Closed
- HomeRefill data breach: 187K accounts exposed High · Breach · Closed
2 October 2025
- Jenkins Remote Code Execution Vulnerability (CVE-2017-1000353) Critical · Patch now · Closed
- Juniper ScreenOS Improper Authentication Vulnerability (CVE-2015-7755) Critical · Patch now · Closed
- Samsung Mobile Devices Out-of-Bounds Write Vulnerability (CVE-2025-21043) Critical · Patch now · Closed
- GNU Bash OS Command Injection Vulnerability (CVE-2014-6278) High · Patch now · Closed
- Smartbedded Meteobridge Command Injection Vulnerability (CVE-2025-4008) High · Patch now · Closed
29 September 2025
- Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability (CVE-2025-10035) Critical · Patch now · Closed
- Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2025-32463) High · Patch now · Closed
- Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability (CVE-2025-20352) High · Patch now · Closed
- Adminer Server-Side Request Forgery Vulnerability (CVE-2021-21311) High · Patch now · Closed
- Libraesva Email Security Gateway Command Injection Vulnerability (CVE-2025-59689) Medium · Patch now · Closed
25 September 2025
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability (CVE-2025-20333) Critical · Patch now · Closed
- Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability (CVE-2025-20362) High · Patch now · Closed
- Cultura data breach: 1.5M accounts exposed Medium · Breach · Closed
24 September 2025
- Bouygues Telecom data breach: 5.7M accounts exposed High · Breach · Closed
23 September 2025
- Google Chromium V8 Type Confusion Vulnerability (CVE-2025-10585) Critical · Patch now · Closed
21 September 2025
- Animeify data breach: 808K accounts exposed High · Breach · Closed
18 September 2025
- FreeOnes data breach: 960K accounts exposed High · Breach · Closed
16 September 2025
- Miljödata data breach: 870K accounts exposed Medium · Breach · Closed
11 September 2025
- Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability (CVE-2025-5086) Critical · Patch now · Closed
4 September 2025
- Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability (CVE-2025-53690) Critical · Patch now · Closed
- Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability (CVE-2025-38352) High · Patch now · Closed
- Android Runtime Use-After-Free Vulnerability (CVE-2025-48543) High · Patch now · Closed
3 September 2025
- TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability (CVE-2025-9377) High · Patch now · Closed
- TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability (CVE-2023-50224) Medium · Patch now · Closed
2 September 2025
- TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability (CVE-2020-24363) High · Patch now · Closed
- Meta Platforms WhatsApp Incorrect Authorization Vulnerability (CVE-2025-55177) Medium · Patch now · Closed
1 September 2025
- Giglio data breach: 1.0M accounts exposed Medium · Breach · Closed
29 August 2025
- Sangoma FreePBX Authentication Bypass Vulnerability (CVE-2025-57819) Critical · Patch now · Closed
27 August 2025
- TheSqua.re data breach: 107K accounts exposed Medium · Breach · Closed
26 August 2025
- Citrix NetScaler Memory Overflow Vulnerability (CVE-2025-7775) Critical · Patch now · Closed
25 August 2025
- Git Link Following Vulnerability (CVE-2025-48384) High · Patch now · Closed
- Citrix Session Recording Improper Privilege Management Vulnerability (CVE-2024-8068) High · Patch now · Closed
- Citrix Session Recording Deserialization of Untrusted Data Vulnerability (CVE-2024-8069) High · Patch now · Closed
21 August 2025
- Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (CVE-2025-43300) Critical · Patch now · Closed
18 August 2025
- Trend Micro Apex One OS Command Injection Vulnerability (CVE-2025-54948) Critical · Patch now · Closed
- Allianz Life data breach: 1.1M accounts exposed Medium · Breach · Closed
13 August 2025
- Data Troll Stealer Logs data breach: 109.5M accounts exposed Critical · Breach · Closed
- N-able N-Central Command Injection Vulnerability (CVE-2025-8876) High · Patch now · Closed
- N-able N-Central Insecure Deserialization Vulnerability (CVE-2025-8875) High · Patch now · Closed
12 August 2025
- RARLAB WinRAR Path Traversal Vulnerability (CVE-2025-8088) High · Patch now · Closed
- Microsoft Office Excel Remote Code Execution Vulnerability (CVE-2007-0671) High · Patch now · Closed
- Microsoft Internet Explorer Resource Management Errors Vulnerability (CVE-2013-3893) High · Patch now · Closed
8 August 2025
- Unigame data breach: 843K accounts exposed High · Breach · Closed
5 August 2025
- D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability (CVE-2020-25078) High · Patch now · Closed
- D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability (CVE-2020-25079) High · Patch now · Closed
- D-Link DNR-322L Download of Code Without Integrity Check Vulnerability (CVE-2022-40799) High · Patch now · Closed
31 July 2025
- Pi-hole data breach: 29K accounts exposed Medium · Breach · Closed
28 July 2025
- Cisco Identity Services Engine Injection Vulnerability (CVE-2025-20337) Critical · Patch now · Closed
- Cisco Identity Services Engine Injection Vulnerability (CVE-2025-20281) Critical · Patch now · Closed
- PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-2533) High · Patch now · Closed
23 July 2025
- Creams Cafe data breach: 159K accounts exposed Medium · Breach · Closed
22 July 2025
- SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (CVE-2025-2776) Critical · Patch now · Closed
- CrushFTP Unprotected Alternate Channel Vulnerability (CVE-2025-54309) Critical · Patch now · Closed
- SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (CVE-2025-2775) High · Patch now · Closed
- Google Chromium ANGLE and GPU Improper Input Validation Vulnerability (CVE-2025-6558) High · Patch now · Closed
- Microsoft SharePoint Code Injection Vulnerability (CVE-2025-49704) High · Patch now · Closed
- Microsoft SharePoint Improper Authentication Vulnerability (CVE-2025-49706) Medium · Patch now · Closed
20 July 2025
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-53770) Critical · Patch now · Closed
18 July 2025
- Fortinet FortiWeb SQL Injection Vulnerability (CVE-2025-25257) Critical · Patch now · Closed
15 July 2025
- MaReads data breach: 74K accounts exposed Medium · Breach · Closed
14 July 2025
- Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2025-47812) Critical · Patch now · Closed
13 July 2025
- Omnicuris data breach: 215K accounts exposed Medium · Breach · Closed
10 July 2025
- Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability (CVE-2025-5777) High · Patch now · Closed
7 July 2025
- PHPMailer Command Injection Vulnerability (CVE-2016-10033) Critical · Patch now · Closed
- Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability (CVE-2014-3931) Critical · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-9621) High · Patch now · Closed