Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Milvus versions up to 2.6.22 and version 3.0.0 contain an unauthenticated denial of service vulnerability. Remote attackers can send crafted HTTP GET requests to the management server on port 9091 to exploit an unprotected /management/stop endpoint. This endpoint bypasses REST API authentication middleware and allows attackers to shut down key service components, causing denial of service. Join the discussion | CVE Database V5 | 08/05/2026, 19:18:23 UTC Added: 08/05/2026, 19:42:08 UTC |
CVE-2026-10814: Use of Weak Hash in milvus-io milvusCVE-2026-10814 0 A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kv_catalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 3d932f1c3e065351c4440c27abe1e6479752544d. Applying a patch is the recommended action to fix this issue. Join the discussion | CVE Database V5 | 06/11/2026, 11:45:00 UTC Added: 06/04/2026, 15:48:58 UTC |
0 A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of the file pkg/util/expr/expr.go of the component HTTP Endpoint. The manipulation of the argument code leads to deserialization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. A fix is planned for the next release 2.6.8. Join the discussion | CVE Database V5 | 01/05/2026, 02:32:06 UTC Added: 01/05/2026, 03:14:31 UTC |
Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2.4.24, 2.5.21, and 2.6.5. If immediate upgrade is not possible, a temporary mitigation can be applied by removing the sourceID header from all incoming requests at the gateway, API gateway, or load balancer level before they reach the Milvus Proxy. This prevents attackers from exploiting the authentication bypass behavior. Join the discussion | CVE Database V5 | 11/10/2025, 22:05:14 UTC Added: 11/10/2025, 22:17:37 UTC |
Showing 1 to 4 of 4 results