Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 22 threats · Tuesday, Jul 14· last check 2026-11-04 16:25 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Tuesday, Jul 14

Most severe in everything

EXPLOITED IN THE WILD

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interfaceSonicWall SMA1000 Appliances

EXPLOITED IN THE WILD

microsoft sharepoint server: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code…Microsoft SharePoint

EXPLOITED IN THE WILD

microsoft sharepoint server: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code…Microsoft SharePoint

EXPLOITED IN THE WILD

microsoft sharepoint server: Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to…microsoft sharepoint server

Tuesday, Jul 14

MEDIUMINCIDENTCircleCI: Delays starting jobs on Docker (Gen 2) resource classesCircleCIVendor2026-07-14 22:54 UTCby status page–WHAT TO DO MEDIUM6.5jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationtools.jackson.core:jackson-databindPackage2026-07-14 21:17 UTCby GitHub Advisories–FIX 3.1.5 CRITICAL9.9FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCEfacturascripts/facturascriptsPackage2026-07-14 20:52 UTCby GitHub Advisories–FIX 2026.3 HIGH8.1NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Modenetlicensing-mcpPackage2026-06-04 10:10 UTCby GitHub Advisories–FIX 0.1.6 HIGH7.5Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service VulnerabilityMicrosoft.NetCore.App.Runtime.linux-armRuntime2026-07-14 20:17 UTCby GitHub Advisories–FIX 10.0.10 HIGH7.8Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-x64Runtime2026-07-14 20:17 UTCby GitHub Advisories–FIX 10.0.10 HIGH7.5Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service VulnerabilityMicrosoft.NetCore.App.Runtime.linux-armRuntime2026-07-14 20:17 UTCby GitHub Advisories–FIX 10.0.10 CRITICAL9.3EXPLOITEDAdobe Commerce: unrestricted file upload lets attackers run codeAdobe Commerce and MagentoVendor2026-07-14 20:17 UTCby EPSS–WHAT TO DO HIGH7.5Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service VulnerabilityMicrosoft.NetCore.App.Runtime.linux-armRuntime2026-07-14 18:18 UTCby GitHub Advisories–FIX 10.0.10 CRITICAL9.1EXPLOITEDmicrosoft sharepoint server: Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over…Microsoft SharePointVendor2026-07-14 18:18 UTCby CISA KEV–FIX 16.0.19725.20434 HIGH8.0FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the exportfacturascripts/facturascriptsPackage2026-07-14 17:18 UTCby GitHub Advisories–FIX 2026.2 CRITICAL9.8EXPLOITEDmicrosoft sharepoint server: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code…Microsoft SharePointVendor2026-07-14 17:17 UTCby CISA KEV–FIX 16.0.19725.20434 CRITICAL9.8EXPLOITEDmicrosoft sharepoint server: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code…Microsoft SharePointVendor2026-07-14 17:17 UTCby CISA KEV–FIX 16.0.19725.20434 CRITICAL9.9FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`facturascripts/facturascriptsPackage2026-07-14 17:11 UTCby GitHub Advisories–FIX 2026.2 CRITICALINCIDENTSentry: Error ingestion degraded in DE regionSentryVendor2026-07-14 14:44 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in my-empty-package (npm)my-empty-packagePackage2026-07-14 03:57 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTCircleCI: Login issues for some Bitbucket usersCircleCIVendor2026-07-14 02:49 UTCby status page–WHAT TO DO HIGH8.5Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLsopenclawPackage2026-07-14 00:31 UTCby GitHub Advisories–FIX 2026.6.6 CRITICAL9.8EXPLOITEDmicrosoft sharepoint server: Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to…microsoft sharepoint serverVendor2026-07-14by CISA KEV–FIX 16.0.19725.20434 CRITICAL10.0EXPLOITEDA Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interfaceSonicWall SMA1000 AppliancesVendor2026-07-14by CISA KEV–WHAT TO DO HIGH7.2EXPLOITEDPost-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in…SonicWall SMA1000 AppliancesInfrastructure2026-07-14by CISA KEV–WHAT TO DO HIGH7.8EXPLOITEDInsufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized…Microsoft Active Directory Federation ServicesVendor2026-07-14by CISA KEV–FIX 10.0.14393.9339

Monday, Jul 13Tuesday, Jul 14Wednesday, Jul 15