Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 7 results
highbug_reportVulnerabilitybug_reportVulnerability
Marimo RCE (CVE-2026-39987) exploited for 8-second pivot to SSH bastion
All versions of Marimo notebook application. CVE-2026-39987 is a pre-authenticated remote code execution vulnerability (CVSS 9.3) actively exploited within hours of public disclosure.
Marimo15 Sep · 09:52 UTC
highbug_reportVulnerabilitybug_reportVulnerability
Marimo notebook code injection allows MCP command execution in edit mode
Marimo notebook software versions prior to 0.23.15. Vulnerability (CVE-2026-75149) affects users who open untrusted notebooks in edit mode. Fixed in version 0.23.15 (July 23, 2026); current release is 0.24.0.
Marimo25 Aug · 10:43 UTC
highbug_reportVulnerabilitybug_reportVulnerability
CVE-2026-39987 in Marimo actively exploited for cloud credential theft
Marimo notebook platform (specific versions not disclosed). Affects internet-exposed Marimo notebook instances vulnerable to CVE-2026-39987.
CVE-2026-3998729 May · 12:39 UTC