Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-14646: CWE-918 Server-Side Request Forgery (SSRF) in Sonatype Nexus Repository 3CVE-2026-14646 0 Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymous user, if anonymous access is enabled — could receive a response from an internal network address or cloud metadata endpoint as repository content, potentially exposing sensitive information such as cloud IAM credentials. Join the discussion | CVE Database V5 | 07/14/2026, 16:49:46 UTC Added: 07/14/2026, 17:18:29 UTC |
CVE-2026-7494: CWE-918 Server-Side Request Forgery (SSRF) in Sonatype Nexus RepositoryCVE-2026-7494 0 Sonatype Nexus Repository 3 versions from 3.0.0 up to but not including 3.94.0 are vulnerable to a Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. An authenticated user with the nexus:ssl-truststore:read permission can cause the server to make outbound connections to internal or restricted network hosts. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.3. Join the discussion | CVE Database V5 | 07/14/2026, 15:46:24 UTC Added: 07/14/2026, 16:18:56 UTC |
CVE-2026-14504: CWE-862 Missing Authorization in Sonatype Nexus Repository 3CVE-2026-14504 0 An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check. Join the discussion | CVE Database V5 | 07/14/2026, 15:55:04 UTC Added: 07/14/2026, 16:18:54 UTC |
Showing 1 to 3 of 3 results