For coding agents

Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 846 threats · Tuesday, Nov 3· last check 2026-11-05 00:43 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Tuesday, Nov 3

Most severe in everything

EXPLOITED IN THE WILD

Zyxel GS1900-24E switch: crafted HTTP request can run OS commandsGS1900-24E firmware2 talking

CAMPAIGNNO CVE YET

EXPLOITED IN THE WILD

Attackers exploit unauthenticated Node-RED editors (CVE-2026-58115, Siemens SIMATIC IoT2050) to deploy a Linux bot and command webshells (VulnCheck)Node-RED1 talking

BREACHNO CVE YET

Attackers sign in to Microsoft Entra ID and Azure DevOps as app service principals using stolen client secrets, hitting MSPs and their customer tenants to loot Key Vault and files (Todyl, Huntress)Microsoft Entra ID

BREACHNO CVE YET

GitBook breached: attackers got into parts of GitBook's infrastructure on 2 Nov; docs sites and editor taken offline, customer data impact unknownGitBook

Check new threats with your coding agent

It checks this feed against your repository before you add a dependency, and whenever you ask about a CVE.

Tuesday, Nov 3

HIGH7.7Claude Code: Edit tool symlink race lets sandboxed code overwrite files outside workspaceAI agents & MCP2026-10-26 11:43 UTCby EPSS–WHAT TO DO HIGH7.5Claude Desktop on Windows runs a planted git.exe from opened repositoriesAI agents & MCP2026-10-13 12:24 UTCby EPSS–WHAT TO DO MEDIUM4.2Lightdash: authorization bypass lets users alter dashboards in other projectsAI agents & MCP2026-11-03 16:35 UTCby EPSS–WHAT TO DO LOWNOT SCOREDArc has unauthenticated application log disclosure via `/api/v1/logs`github.com/basekick-labs/arcAI agents & MCP2026-11-03 16:29 UTCby GitHub Advisories–FIX 0.0.0-20260615165136-bb7d9761ad98 HIGH7.7Label Studio: image export lets logged-in users reach internal URLs and steal tokensAI agents & MCP2026-09-29 14:48 UTCby EPSS–WHAT TO DO HIGH8.2WPPConnect Server: missing auth lets anyone send WhatsApp messageswppconnect-serverAI agents & MCP2026-11-03 16:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUM5.1SQLBot: path traversal in importToDb lets admins read server filesAI agents & MCP2026-11-03 16:17 UTCby EPSS–WHAT TO DO HIGH8.8AzuraCast: station users can run OS commands through StereoTool settingsazuracast/azuracastAI agents & MCP2026-10-18 15:44 UTCby InfraStack Analyst–WHAT TO DO HIGH7.1SurrealDB: nested values crash the database server for all tenantsAI agents & MCP2026-10-19 08:51 UTCby EPSS–WHAT TO DO MEDIUM5.1SurrealDB: JWKS URLs bypass deny-net rules, enabling internal server-side requestsAI agents & MCP2026-10-19 08:51 UTCby EPSS–WHAT TO DO MEDIUM5.3SurrealDB: port-specific network deny rules can be bypassed, enabling internal SSRFAI agents & MCP2026-10-19 08:51 UTCby EPSS–WHAT TO DO MEDIUM4.8SurrealDB: SSRF via IPv6 transition addresses reaches internal hostsAI agents & MCP2026-10-19 08:51 UTCby EPSS–WHAT TO DO HIGH8.6SurrealDB: MCP session fingerprint lets one user hijack another's sessionAI agents & MCP2026-10-19 08:51 UTCby EPSS–WHAT TO DO HIGH7.1Instatic: AI/MCP read tools expose other users' private draftsAI agents & MCP2026-11-03 10:04 UTCby EPSS–WHAT TO DO

Monday, Nov 2Tuesday, Nov 3Wednesday, Nov 4