Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-75575: Improper Restriction of Excessive Authentication Attempts in RocketChat Rocket.ChatCVE-2026-75575 0 CVE-2026-75575 is a vulnerability in Rocket.Chat where the sendForgotPasswordEmail method lacks rate limiting, allowing unauthenticated attackers to trigger unlimited password reset emails. This can be used to send a high volume of reset emails to a target address or to probe account existence and type. Later versions of Rocket.Chat implement a rate limit of ten calls per minute per client IP to mitigate this issue. Join the discussion | CVE Database V5 | 08/25/2026, 01:30:29 UTC Added: 08/25/2026, 01:52:59 UTC |
CVE-2026-72919: CWE-862: Missing Authorization in RocketChat Rocket.ChatCVE-2026-72919 0 Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the channels.convertToTeam REST endpoint allows an authenticated registered user with the create-team permission to convert an unrelated public channel by supplying channelName instead of channelId because the edit-room permission is checked only for channelId. This issue is fixed in versions 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1. Join the discussion | CVE Database V5 | 08/10/2026, 21:44:59 UTC Added: 08/10/2026, 21:56:45 UTC |
CVE-2026-72918: CWE-862: Missing Authorization in RocketChat Rocket.ChatCVE-2026-72918 0 Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary notification bodies because the sender is not checked, and the client-side UI can create an ephemeral fake message in another user's currently open chat. This issue is fixed in versions 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1. Join the discussion | CVE Database V5 | 08/10/2026, 21:42:36 UTC Added: 08/10/2026, 21:56:45 UTC |
Showing 1 to 3 of 3 results