Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Join the discussion | CVE Database V5 | 05/02/2026, 15:00:13 UTC Added: 05/02/2026, 15:06:23 UTC |
0 A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet. Join the discussion | CVE Database V5 | 05/02/2026, 14:45:12 UTC Added: 05/02/2026, 15:06:23 UTC |
CVE-2026-7177 is a server-side request forgery (SSRF) vulnerability affecting ChatGPTNextWeb NextChat versions up to 2.16.1. The flaw exists in the proxyHandler function within the app/api/[provider]/[... path]/route.ts file. This vulnerability allows an unauthenticated remote attacker to manipulate server requests, potentially causing the server to make unintended requests. The exploit code has been publicly released, increasing the risk of exploitation. As of the published date, the vendor has not responded or provided a fix. The vulnerability has a CVSS 4. Join the discussion | CVE Database V5 | 04/27/2026, 21:45:15 UTC Added: 04/27/2026, 22:00:06 UTC |
0 Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints. Join the discussion | CVE Database V5 | 11/03/2025, 00:00:00 UTC Added: 11/03/2025, 20:00:59 UTC |
Showing 1 to 4 of 4 results