Threat intelligence dashboard
Today's CVEs, attack reports, and CISA KEV — CVSS, EPSS, and MITRE context at a glance.
Attack reports – last 7 days · through Tuesday 30 June 2026 (29)
-
Confidence 100 2 MITREs 3 IOCs 3 Observables
-
Confidence 100 16 MITREs 108 IOCs 108 Observables
-
Confidence 100 1 Malware 45 IOCs
-
Confidence 100 2 CVEs 20 MITREs 2 IOCs 2 Observables
-
Confidence 100 26 MITREs 1 Malware 29 IOCs 12 Observables 1 APT
Vulnerabilities today (21)
The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send(). When the enqueue fails, …
- Attack vector
- ADJACENT_NETWORK
- Complexity
- HIGH
- Published
- 30/06/2026
Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script …
- Published
- 30/06/2026
Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, allowing acceptance of HS384 and HS512 tokens alongside …
- Attack vector
- NETWORK
- Complexity
- HIGH
- Published
- 30/06/2026
The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field …
- Attack vector
- NETWORK
- Complexity
- HIGH
- Published
- 30/06/2026
The Team Members – Multi Language Supported Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in …
- Attack vector
- NETWORK
- Complexity
- HIGH
- Published
- 30/06/2026
The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and …
- Attack vector
- NETWORK
- Complexity
- LOW
- Published
- 30/06/2026