Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 Apache DolphinScheduler before version 3.4.2 contains an authorization vulnerability (CWE-863) that allows a general user to mint admin access tokens via the /access-tokens endpoint. This flaw enables privilege escalation to administrative access. The issue is fixed in version 3.4.2. Join the discussion | CVE Database V5 | 08/25/2026, 09:57:48 UTC Added: 08/25/2026, 10:08:03 UTC |
CVE-2026-47340 is a vulnerability in Apache DolphinScheduler before version 3.4.2 that allows authenticated users to access alert instances linked to alert groups for which they lack permission. This exposure of sensitive information does not affect system integrity or availability but compromises confidentiality. The issue is fixed in version 3.4.2, and users are advised to upgrade to this version to remediate the vulnerability. Join the discussion | CVE Database V5 | 06/17/2026, 09:00:12 UTC Added: 06/17/2026, 09:45:25 UTC |
0 Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue. Join the discussion | CVE Database V5 | 06/17/2026, 08:57:55 UTC Added: 06/17/2026, 09:45:22 UTC |
0 An incorrect authorization vulnerability in Apache DolphinScheduler allows users with limited permissions to access workflow instance information from projects they should not have access to. This issue affects versions prior to 3.4.2. The vulnerability has a medium severity rating with a CVSS score of 6.5. Upgrading to version 3.4.2 resolves the issue. Join the discussion | CVE Database V5 | 06/17/2026, 08:56:55 UTC Added: 06/17/2026, 09:45:22 UTC |
0 Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue. Join the discussion | CVE Database V5 | 06/17/2026, 08:55:29 UTC Added: 06/17/2026, 09:45:22 UTC |
0 An authorization flaw in Apache DolphinScheduler before version 3.4.2 allows unauthorized users to access arbitrary data source metadata via the DataSource API. This vulnerability is identified as CWE-863 Incorrect Authorization. The issue is fixed in version 3.4.2. Join the discussion | CVE Database V5 | 06/17/2026, 08:43:11 UTC Added: 06/17/2026, 09:45:22 UTC |
0 CVE-2026-23902 is an incorrect authorization vulnerability in Apache DolphinScheduler prior to version 3.4.1. Authenticated users with system login permissions can execute workflows using tenants not defined on the platform. This could lead to unauthorized access or actions within the system. The vulnerability has a high severity with a CVSS score of 8.1. Users are advised to upgrade to version 3.4.1, which addresses this issue. Join the discussion | CVE Database V5 | 04/24/2026, 10:56:18 UTC Added: 04/24/2026, 11:51:04 UTC |
Showing 1 to 7 of 7 results