Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user… (CVE-2026-76258)CVE-2026-76258 0 A vulnerability in Splunk Enterprise and Splunk Secure Gateway allows non-admin users to register arbitrary companion apps that cause mobile user requests, including sensitive tokens, to be forwarded to attacker-controlled URLs. This occurs due to a hard-coded cryptographic key enabling unrestricted callback URL registration. The issue affects multiple versions below specific fixed releases. Join the discussion | GCVE Database | 08/20/2026, 00:34:55 UTC Added: 08/20/2026, 14:09:20 UTC |
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user… (CVE-2026-76256)CVE-2026-76256 0 A vulnerability in Splunk Enterprise and Splunk Secure Gateway versions prior to specified fixed releases allows non-admin and non-power users to read sensitive Security Assertion Markup Language (SAML) setup and instance settings via certain REST API endpoints. This occurs because these endpoints do not enforce proper authorization checks before returning configuration information. Join the discussion | GCVE Database | 08/20/2026, 00:34:55 UTC Added: 08/20/2026, 14:09:20 UTC |
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user… (CVE-2026-76351)CVE-2026-76351 0 A vulnerability in Splunk Enterprise and Splunk Secure Gateway allows a user without admin or power roles to exploit crafted report notification data to gain unauthorized system-level access. This flaw enables the attacker to obtain a session token without a password and modify platform configuration via the REST API. The issue arises because Splunk Secure Gateway does not validate decoded report notification identifiers before using them in API requests. Join the discussion | GCVE Database | 08/20/2026, 00:35:01 UTC Added: 08/20/2026, 14:09:18 UTC |
Showing 1 to 3 of 3 results