Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-110216 is a missing authorization vulnerability in youlaitech's youlai-boot product up to version 2.21.1. The updateUserStatus handler lacks proper authorization checks, allowing any authenticated user to enable or disable user accounts. This flaw enables attackers to disable critical accounts such as root or admin, potentially locking out administrators, or to re-enable accounts that have been disabled by administrators. Join the discussion | CVE Database V5 | 10/13/2026, 18:50:04 UTC Added: 10/13/2026, 19:04:19 UTC |
0 youlai-boot versions up to 2.21.1 have a missing authorization vulnerability that allows authenticated users with low privileges to escalate their permissions. Specifically, users such as the GUEST test account can assign arbitrary menu and button permissions to their own roles via a PUT API endpoint, effectively granting themselves administrator-level access after refreshing the Redis permission cache. Join the discussion | CVE Database V5 | 10/13/2026, 18:50:03 UTC Added: 10/13/2026, 19:04:19 UTC |
0 youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles. Join the discussion | CVE Database V5 | 12/22/2025, 00:00:00 UTC Added: 12/22/2025, 21:59:21 UTC |
0 youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass vulnerability. Join the discussion | CVE Database V5 | 12/22/2025, 00:00:00 UTC Added: 12/22/2025, 21:26:56 UTC |
0 Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 18:13:25 UTC |
0 Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 18:03:14 UTC |
Showing 1 to 6 of 6 results