Live· 12 threats · Monday, Jul 27· last check 2026-11-04 15:09 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Monday, Jul 27

Most severe in everything

CRITICAL10.0

EXPLOITED IN THE WILD

arista velocloud orchestrator: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access…VeloCloud Orchestrator On-Prem1 talking

CRITICAL9.8

EXPLOITED IN THE WILD

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent…jetbrains teamcity

HIGH8.8

EXPLOITED IN THE WILD

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a…JFrog Artifactory (Self-Hosted)

CRITICAL9.8

apple macos: A buffer overflow was addressed with improved bounds checkingapple macos

Monday, Jul 27

HIGHINCIDENTMongoDB Atlas: VoyageAI elevated errorsMongoDB AtlasVendor2026-07-27 23:37 UTCby status page–WHAT TO DO CRITICAL9.8apple macos: A buffer overflow was addressed with improved bounds checkingapple macosVendor2026-07-27 21:17 UTCby EPSS–FIX 14.8.8 HIGH7.8The issue was addressed with improved bounds checksapple ipadosVendor2026-07-27 21:17 UTCby EPSS–FIX 26.6 MEDIUM5.5apple macos: The issue was addressed with improved memory handlingapple macosInfrastructure2026-07-27 21:16 UTCby EPSS–FIX 14.8.8 HIGH8.8EXPLOITEDJFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a…JFrog Artifactory (Self-Hosted)Vendor2026-07-27 20:16 UTCby InfraStack Analyst–FIX 7.133.11 HIGHINCIDENTDatadog: Synthetics Test Results DelayedDatadogVendor2026-07-27 19:05 UTCby status page–WHAT TO DO HIGHINCIDENTDigitalOcean: Agent Platform Requests Returning HTTP 500 ErrorsDigitalOceanVendor2026-07-27 18:31 UTCby status page–WHAT TO DO CRITICAL9.8EXPLOITEDIn JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent…jetbrains teamcityVendor2026-07-27 17:16 UTCby CISA KEV–FIX 2025.11.7 CRITICALINCIDENTSentry: Error and profile ingestion issues in USSentryVendor2026-07-27 16:23 UTCby status page–WHAT TO DO MEDIUMINCIDENTRender: Degraded dashboard performanceRenderVendor2026-07-27 14:43 UTCby status page–WHAT TO DO CRITICAL9.8vBulletin: eval injection lets unauthenticated requests run server codeVendor2026-07-27 14:16 UTCby EPSS–WHAT TO DO CRITICAL10.0EXPLOITEDarista velocloud orchestrator: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access…VeloCloud Orchestrator On-Prem1 talkingVendor2026-07-27by InfraStack Analyst1talkingFIX 5.2.3.14