Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-52610: n/aCVE-2026-52610
0

CVE-2026-52610 is an arbitrary file write and directory traversal vulnerability in reportico-web versions up to and including 8.1.0. It allows remote attackers to create or overwrite files anywhere on the filesystem accessible by the web user by manipulating the "saveTemplate" parameter together with the "execute_mode=PREPARE" parameter in the "run.php" endpoint. No patch or official remediation information is currently available.

Join the discussion
CVE-2026-52608: n/aCVE-2026-52608
0

An incorrect access control vulnerability in reportico-web versions up to 8.1.0 allows unauthenticated attackers to inject arbitrary PHP code into the PreExecuteCode attribute of any report. This vulnerability can lead to remote code execution regardless of the safe_mode setting.

Join the discussion
CVE-2026-52607: n/aCVE-2026-52607
0

CVE-2026-52607 is a directory traversal vulnerability in reportico-web versions up to and including 8.1.0. It allows remote attackers to expose or execute arbitrary PHP files on the web server by manipulating the target_format parameter along with execute_mode=EXECUTE in the run.php endpoint. This could lead to unauthorized code execution on the affected server.

Join the discussion
CVE-2026-52606: n/aCVE-2026-52606
0

A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the loadTemplate parameter in conjunction with the execute_mode=PREPARE parameter of run.php.

Join the discussion

Showing 1 to 4 of 4 results

Filters:Package: pkg:github/reportico-web/reportico
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses