Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-62391 is a path traversal vulnerability in Apache Kyuubi affecting versions from 1.6.0 up to but not including 1.12.0. The issue arises because the security fix for a previous vulnerability (CVE-2025-66518) is incomplete, allowing clients with access to the Kyuubi Server via frontend protocols to bypass server-side directory allowlist restrictions using unprefixed Spark config aliases. This vulnerability has a high severity score of 8.1 and impacts confidentiality and integrity without affecting availability. Join the discussion | CVE Database V5 | 07/31/2026, 09:58:15 UTC Added: 07/31/2026, 10:22:52 UTC |
0 Apache Kyuubi versions from 1.8.0 before 1.12.0 contain a vulnerability in the Engine UI proxy component that allows remote attackers with network access to cause the server to send HTTP requests to arbitrary hosts. This behavior can lead to Server-Side Request Forgery (SSRF) or open-proxy issues. The vulnerability is addressed in version 1.12.0, which disables the proxy by default and requires explicit configuration to enable it safely. Join the discussion | CVE Database V5 | 07/29/2026, 09:07:18 UTC Added: 07/29/2026, 09:37:54 UTC |
0 Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allow.list and use local files which are not listed in the config. This issue affects Apache Kyuubi: from 1.6.0 through 1.10.2. Users are recommended to upgrade to version 1.10.3 or upper, which fixes the issue. Join the discussion | CVE Database V5 | 01/05/2026, 08:46:27 UTC Added: 01/05/2026, 08:59:31 UTC |
Showing 1 to 3 of 3 results