Threat intelligence dashboard
Today's CVEs, attack reports, and CISA KEV — CVSS, EPSS, and MITRE context at a glance.
Attack reports – last 7 days · through Wednesday 8 July 2026 (16)
-
Confidence 100 20 MITREs 3 Malwares 17 IOCs 14 Observables 1 APT
-
Confidence 100 20 MITREs 55 IOCs 55 Observables
-
Confidence 100 1 Malware 26 IOCs 15 Observables
-
Confidence 100 12 MITREs 4 Malwares 13 IOCs 9 Observables
-
Confidence 100 20 MITREs 14 IOCs 14 Observables
Vulnerabilities today (24)
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and …
- Attack vector
- NETWORK
- Complexity
- LOW
- Published
- 08/07/2026
Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an …
- Attack vector
- NETWORK
- Complexity
- LOW
- Published
- 08/07/2026
OpenWrt is a Linux operating system targeting embedded devices. Before v25.12.5, an integer underflow in handle_send_a() of the Emergency Access Daemon allows …
- Attack vector
- ADJACENT_NETWORK
- Complexity
- LOW
- Published
- 08/07/2026
Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 are vulnerable …
- Attack vector
- NETWORK
- Complexity
- LOW
- Published
- 08/07/2026
FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call …
- Attack vector
- NETWORK
- Complexity
- LOW
- Published
- 08/07/2026
Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a …
- Published
- 08/07/2026
Actual is a local-first personal finance tool. Prior to 26.6.0, exportToCSV and exportQueryToCSV in packages/loot-core/src/server/transactions/export/export-to-csv.ts pass user-controlled Payee, Notes, Account, and Category …
- Attack vector
- NETWORK
- Complexity
- HIGH
- Published
- 08/07/2026
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging …
- Attack vector
- NETWORK
- Complexity
- HIGH
- Published
- 08/07/2026
Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files …
- Published
- 08/07/2026