Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512… (CVE-2026-58113)CVE-2026-58113 0 A cross-site scripting (XSS) vulnerability exists in multiple versions of Teamcenter prior to specific patch levels. The flaw occurs because user-supplied input is not properly encoded in HTML attribute contexts during the authentication redirect flow. This allows an unauthenticated attacker to inject arbitrary JavaScript into the browser of an authenticated user who visits a crafted URL, potentially enabling actions within the victim's session. Join the discussion | GCVE Database | 09/08/2026, 09:35:38 UTC Added: 09/08/2026, 12:55:05 UTC |
CVE-2026-58113: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Siemens Teamcenter V2412CVE-2026-58113 0 A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session. Join the discussion | CVE Database V5 | 09/08/2026, 08:11:21 UTC Added: 09/08/2026, 08:37:40 UTC |
Showing 1 to 2 of 2 results