Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-22789 is a medium-severity vulnerability in SMEWebify's WebErpMesv2 versions prior to 1.19 that allows authenticated users to bypass file upload validation and upload arbitrary files, including PHP scripts. This can lead to remote code execution (RCE) on the affected system. The flaw exists in multiple controllers and is similar to CVE-2025-52130 but in different code locations not fixed previously. Exploitation requires authentication but no user interaction beyond that. The vulnerability impacts confidentiality and integrity but not availability, with a CVSS score of 5.4. No known exploits are currently reported in the wild. European organizations using WebErpMesv2 in manufacturing or resource management should prioritize upgrading to version 1.19 or later to mitigate risk. Join the discussion | CVE Database V5 | 01/12/2026, 21:52:11 UTC Added: 01/12/2026, 21:53:45 UTC |
0 CVE-2026-22788 is a high-severity vulnerability in SMEWebify's WebErpMesv2 versions prior to 1.19, where multiple sensitive API endpoints lack authentication. This allows unauthenticated remote attackers to access critical business data such as companies, quotes, orders, tasks, and whiteboards. Attackers can also perform limited write operations, including creating company records and fully manipulating collaboration whiteboards. The vulnerability does not require user interaction or authentication and has a CVSS score of 8.2, indicating a significant risk to confidentiality and partial impact on integrity. The issue is resolved in version 1.19. European organizations using affected versions face risks of data exposure and unauthorized data manipulation, especially in manufacturing and resource management sectors. Mitigation involves immediate upgrading to version 1. Join the discussion | CVE Database V5 | 01/12/2026, 21:40:11 UTC Added: 01/12/2026, 21:53:45 UTC |
Showing 1 to 2 of 2 results