Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-94028 is a server-side request forgery (SSRF) vulnerability in Mealie up to version 3.25.1. It affects the payload.model_dump function in the Recipe Action Trigger component. The vulnerability allows remote attackers to manipulate the url argument, potentially causing the server to make unintended requests. The issue is fixed in version 3.26.0. The CVSS 4.0 base score is 5.3, indicating a medium severity level. Join the discussion | CVE Database V5 | 09/20/2026, 13:00:15 UTC Added: 09/20/2026, 13:02:12 UTC |
0 Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and favorite flags belonging to other users across different groups or households. Join the discussion | CVE Database V5 | 09/18/2026, 16:04:48 UTC Added: 09/18/2026, 16:17:14 UTC |
Showing 1 to 2 of 2 results