Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-7292 is a medium severity vulnerability in o2oa version 10.0 affecting the syncFile function in the NodeAgent component. It allows improper authorization, potentially enabling unauthorized remote actions. The attack complexity is high and exploitability is difficult. Although the exploit has been publicly disclosed, there are no known exploits in the wild. The vendor has not yet responded or provided a patch or mitigation guidance. Join the discussion | CVE Database V5 | 04/28/2026, 17:30:10 UTC Added: 04/29/2026, 01:53:35 UTC |
0 A weakness has been identified in o2oa up to 10.0. This affects the function FileAction of the file FileAction.java of the component URL Fetching. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Join the discussion | CVE Database V5 | 04/28/2026, 17:15:11 UTC Added: 04/29/2026, 01:53:32 UTC |
0 A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP POST Request Handler. The manipulation leads to xml external entity reference. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 02/07/2026, 04:02:06 UTC Added: 02/07/2026, 08:01:02 UTC |
Showing 1 to 3 of 3 results