Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-47660: CWE-522: Insufficiently Protected Credentials in aehrc pathlingCVE-2026-47660 0 CVE-2026-47660 is a high-severity vulnerability in Pathling Server prior to version 2.0.0. It involves insufficient validation of the oauthMetadataUrl parameter in the bulk-submit operation, allowing a submitter to specify an OAuth metadata URL that is not checked against allowable sources. This flaw causes the OAuth flow to trust potentially malicious metadata and token endpoints, leading to the use of stored credentials in an unsafe manner. The issue is fixed in Pathling Server 2.0.0. Join the discussion | CVE Database V5 | 08/07/2026, 19:57:24 UTC Added: 08/07/2026, 21:12:02 UTC |
CVE-2026-47664: CWE-20: Improper Input Validation in aehrc pathlingCVE-2026-47664 0 CVE-2026-47664 is a high-severity vulnerability in Pathling Server versions prior to 2.0.0. The issue involves improper input validation in the $import-pnp operation, which accepts an untrusted exportUrl parameter. This allows the server to download files from arbitrary remote FHIR Bulk Export endpoints and treat them as trusted local imports, bypassing configured source allowlists. The vulnerability is fixed in Pathling Server 2.0.0. As a workaround, users can disable the $import-pnp operation or avoid configuring PNP credentials. Join the discussion | CVE Database V5 | 08/07/2026, 20:28:06 UTC Added: 08/07/2026, 20:56:45 UTC |
CVE-2026-47663: CWE-285: Improper Authorization in aehrc pathlingCVE-2026-47663 0 CVE-2026-47663 is a high-severity improper authorization vulnerability in Pathling Server prior to version 2.0.0. The issue arises because typed CRUD/search/batch FHIR operations do not consistently enforce per-resource read and write authorities, allowing authenticated users with only coarse operation permissions to act on resource families without proper authorization. This flaw violates the documented authorization model that requires pairing operation authority with matching per-resource read or write authority. The vulnerability is fixed in Pathling Server 2.0.0. Join the discussion | CVE Database V5 | 08/07/2026, 20:26:08 UTC Added: 08/07/2026, 20:56:45 UTC |
CVE-2026-47662: CWE-20: Improper Input Validation in aehrc pathlingCVE-2026-47662 0 CVE-2026-47662 is a high-severity vulnerability in Pathling Server prior to version 2.0.0. It involves improper input validation related to authorization checks on FHIR resource operations. Authenticated users with coarse operation authorities could act on resource families without having the required per-resource read or write permissions. This flaw affects typed search, update, and related handlers that do not enforce the documented per-resource authorization model consistently. The issue is fixed in Pathling Server 2.0.0. Join the discussion | CVE Database V5 | 08/07/2026, 20:23:20 UTC Added: 08/07/2026, 20:27:00 UTC |
Showing 1 to 4 of 4 results