Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
NextCRM version 0.12.1 has an improper privilege management vulnerability in its MCP product tools API. Authenticated users with low privileges can perform product creation, modification, archiving, or soft-deletion via the /api/mcp/mcp endpoint without proper role checks. This allows unauthorized write access to the shared CRM product catalog. The issue is fixed in version 0.12.3. Join the discussion | CVE Database V5 | 07/20/2026, 21:02:16 UTC Added: 07/20/2026, 21:27:27 UTC |
NextCRM version 0.12.1 contains an improper access control vulnerability in its MCP campaign tools. Authenticated users with valid MCP API tokens can bypass authorization checks and access or modify campaigns they do not own. This includes reading, updating, deleting campaigns, modifying templates and steps, and controlling campaign delivery. The issue is fixed in version 0.12.2. Join the discussion | CVE Database V5 | 07/20/2026, 20:57:19 UTC Added: 07/20/2026, 21:27:27 UTC |
0 NextCRM versions prior to 0.12.0 contain a Broken Object Level Authorization (BOLA) vulnerability in the contact and target update endpoints. This flaw allows any authenticated user, including those with standard member roles, to modify CRM contacts and targets belonging to other users or organizations without proper authorization. The issue is fixed in version 0.12.0. Join the discussion | CVE Database V5 | 07/20/2026, 20:49:38 UTC Added: 07/20/2026, 20:57:21 UTC |
NextCRM versions prior to 0.12.0 contain a Broken Access Control vulnerability in the activateUser and deactivateUser Next.js Server Actions. The application does not verify if the requesting user has the admin role, allowing any authenticated user to activate or deactivate any user account, including administrators. This issue is fixed in version 0.12.0. Join the discussion | CVE Database V5 | 07/20/2026, 20:34:55 UTC Added: 07/20/2026, 20:57:21 UTC |
Showing 1 to 4 of 4 results