Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-111608 is an authorization bypass vulnerability in Jeepay versions up to 3.2.9. It allows authenticated merchant users with specific permissions to delete other merchants' division receivers by exploiting an ownership check on an incorrect database column. The vulnerability requires the attacker to have the ENT_DIVISION_RECEIVER_DELETE permission and to own a receiver group with an ID matching the victim's receiver ID. The CVSS score is low, indicating limited impact and complexity. Join the discussion | CVE Database V5 | 10/16/2026, 18:34:42 UTC Added: 10/16/2026, 17:51:05 UTC |
Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim infoId to MchPayInterfaceConfigController.saveOrUpdate. Attackers holding the default ENT_MCH_PAY_CONFIG_ADD permission can replace signing keys, certificates, and fee rates to break or redirect the victim merchant's payment processing. Join the discussion | CVE Database V5 | 10/16/2026, 18:34:42 UTC Added: 10/16/2026, 17:51:05 UTC |
Showing 1 to 2 of 2 results