Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

4 / 4 results
Active filter:tag: #it-infrastructure✕ clear
CISA adds 5 exploited flaws in Artifactory, ScreenConnect, RouterOS to KEVhighbug_reportVulnerability
bug_reportVulnerability

CISA adds 5 exploited flaws in Artifactory, ScreenConnect, RouterOS to KEV

JFrog Artifactory (CVE-2026-42016, CVE-2026-42018), ConnectWise ScreenConnect client (CVE-2026-84869), and MikroTik RouterOS (CVE-2026-67277, CVE-2026-86060). All vulnerabilities are actively exploited in the wild.

CVE-2026-4201612 Sep · 13:54 UTC
FreeIPA flaw chain allows unauthenticated admin credential creationhighbug_reportVulnerability
bug_reportVulnerability

FreeIPA flaw chain allows unauthenticated admin credential creation

FreeIPA versions prior to 4.13.4 and 389 Directory Server (389-ds-base) on Red Hat Enterprise Linux and Red Hat Directory Server. Red Hat Identity Management (ipa package) is affected. Default installations are vulnerable.

Red Hat8 Sep · 09:22 UTC
Zimbra 10.1.20 patches critical SNMP command injection and 4 XSS flawscriticalbug_reportVulnerability
bug_reportVulnerability

Zimbra 10.1.20 patches critical SNMP command injection and 4 XSS flaws

Zimbra Collaboration Suite versions prior to 10.1.20. Critical impact: SNMP monitoring component when SNMP notifications are enabled. Additional impact: four XSS vulnerabilities affecting the web interface.

Zimbra21 Jul · 11:18 UTC
Critical RCE and XSS flaws in pgAdmin 4 enable credential theftcriticalbug_reportVulnerability
bug_reportVulnerability

Critical RCE and XSS flaws in pgAdmin 4 enable credential theft

pgAdmin 4 (specific vulnerable versions not provided in alert). pgAdmin is a web-based administration tool for PostgreSQL databases, commonly deployed in enterprise environments for database management.

pgAdmin22 Jun · 13:02 UTC