Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. The selected account can then delete the saved search or dashboard or remove the original owner's access. Graylog Cloud was patched before the advisory was published. This issue is fixed in versions 6.3.14, 7.0.9, and 7.1.4. Join the discussion | CVE Database V5 | 09/21/2026, 17:46:30 UTC Added: 09/21/2026, 18:02:24 UTC |
CVE-2026-92789 is a Server-Side Request Forgery (SSRF) vulnerability in Graylog2 graylog2-server versions up to 7.1.4. The software validates outbound URLs against an allowlist before making requests but does not re-validate URLs after following HTTP redirects. This allows attackers with lookup table or event notification permissions to craft allowlisted endpoints that redirect to internal services, causing the server to fetch and return internal responses. Join the discussion | CVE Database V5 | 09/16/2026, 20:32:45 UTC Added: 09/16/2026, 20:47:31 UTC |
Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/{definitionId}/duplicate endpoint that allows authenticated users to clone any event definition. Attackers with the low-privilege eventdefinitions:create capability can read private event definitions including detection queries, aggregation thresholds, grouping fields, schedules, and notification bindings by duplicating them. Join the discussion | CVE Database V5 | 07/22/2026, 16:13:35 UTC Added: 07/22/2026, 16:37:38 UTC |
Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the attack to succeed, the attacker needs a user account in Graylog. They can then proceed to issue hand-crafted requests to the Graylog REST API and exploit a weak permission check for token creation. This issue has been patched in versions 6.2.4 and 6.3.0-rc.2. A workaround involves disabling the respective configuration found in System > Configuration > Users > "Allow users to create personal access tokens". Join the discussion | CVE Database V5 | 07/02/2025, 13:28:08 UTC Added: 07/02/2025, 13:39:30 UTC |
Showing 1 to 4 of 4 results