Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-14896: CWE-863: Incorrect Authorization in HashiCorp NomadCVE-2026-14896 0 HashiCorp Nomad and Nomad Enterprise contain an authorization bypass vulnerability in the dynamic host volumes feature. This flaw allows an operator with host volume delete permission in one namespace to delete sticky volume claims in another namespace. The issue is tracked as CVE-2026-14896 and is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise versions 2.0.4, 1.11.8, and 1.10.14. The vulnerability has a medium severity rating with a CVSS score of 4.2. Join the discussion | CVE Database V5 | 07/08/2026, 20:21:16 UTC Added: 07/08/2026, 20:44:00 UTC |
CVE-2026-14891: CWE-59: Improper Link Resolution Before File Access (Link Following) in HashiCorp NomadCVE-2026-14891 0 HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14. Join the discussion | CVE Database V5 | 07/08/2026, 20:09:05 UTC Added: 07/08/2026, 20:15:35 UTC |
CVE-2026-14373: CWE-862: Missing Authorization in HashiCorp NomadCVE-2026-14373 0 HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host namespace mode options. This may allow an authenticated job submitter to run a container in a host namespace and access information belonging to the host or to other workloads on the same client. This vulnerability, CVE-2026-14373, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14. Join the discussion | CVE Database V5 | 07/08/2026, 17:29:30 UTC Added: 07/08/2026, 19:44:06 UTC |
Showing 1 to 3 of 3 results