Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-109567 is a high-severity improper privilege management vulnerability in zofe rapyd-admin versions 9.0.0 up to but not including 9.20.0. It allows users with the 'edit users' permission to escalate their privileges by assigning themselves the admin role, bypassing tenant scoping and per-record authorization controls. This enables unauthorized impersonation and administrative access. Join the discussion | CVE Database V5 | 10/12/2026, 20:55:20 UTC Added: 10/12/2026, 21:04:06 UTC |
Rapyd Admin versions from 9.0.0 up to but not including 9.20.0 contain a hard-coded credentials vulnerability. This flaw allows remote unauthenticated attackers to gain super-admin access by using a seeded admin account with fixed credentials. The vulnerable account (admin@laravel with password 'admin') is created during setup and recreated on certain commands, enabling attackers to bypass authorization and tenant scoping controls. Join the discussion | CVE Database V5 | 10/12/2026, 20:55:19 UTC Added: 10/12/2026, 21:04:06 UTC |
0 CVE-2026-109565 is a stored cross-site scripting (XSS) vulnerability in zofe rapyd-admin versions 9.4.0 up to but not including 9.20.0. It allows unauthenticated attackers to inject malicious scripts via self-registered display names. These scripts are rendered unescaped in the Activity log Author filter, potentially executing in an administrator's session. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3. Join the discussion | CVE Database V5 | 10/12/2026, 20:55:18 UTC Added: 10/12/2026, 21:04:06 UTC |
Showing 1 to 3 of 3 results