Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 3 threats · Sunday, Aug 2· last check 2026-11-04 14:32 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Sunday, Aug 2

Most severe in everything

EXPLOITED IN THE WILD

n-able n-central: An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions…n-able n-central

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA) in code.vikunja.io/apicode.vikunja.io/api

Vikunja: Link-share principal ID collision allows cross-account API token issuance and management in code.vikunja.io/apicode.vikunja.io/api

Sunday, Aug 2

CRITICAL8.2EXPLOITEDn-able n-central: An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions…n-able n-centralVendor2026-08-02 23:16 UTCby CISA KEV–FIX 2026.3 CRITICAL9.3Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA) in code.vikunja.io/apicode.vikunja.io/apiRuntime2026-08-02 13:16 UTCby EPSS–WHAT TO DO HIGH8.6Vikunja: Link-share principal ID collision allows cross-account API token issuance and management in code.vikunja.io/apicode.vikunja.io/apiPackage2026-08-02 13:16 UTCby EPSS–WHAT TO DO

Saturday, Aug 1Sunday, Aug 2Monday, Aug 3