Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 30 threats · Tuesday, Sep 22· last check 2026-11-04 09:58 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Tuesday, Sep 22

Most severe in everything

EXPLOITED IN THE WILD

arista velocloud orchestrator: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access…VeloCloud Orchestrator On-Prem1 talking

EXPLOITED IN THE WILD

f5 big-ip access policy manager: When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic…F5 BIG-IP APM

EXPLOITED IN THE WILD

wordpress: An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local…WordPress Core1 talking

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in kerokwis (PyPI)kerokwis

Tuesday, Sep 22

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in kerokwis (PyPI)kerokwisPackage2026-09-22 23:52 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in auclean (PyPI)aucleanPackage2026-09-22 20:59 UTCby osv-malicious–UNINSTALL MEDIUM5.5Gardener: Authorization Bypass via Group Subject Injection in gardener/gardenergithub.com/gardener/gardenerPackage2026-08-27 13:33 UTCby EPSS–FIX 1.142.6 HIGH7.5SIPGO: DoS via unvalidated WebSocket frame length in github.com/emiago/sipgogithub.com/emiago/sipgoPackage2026-07-04 18:05 UTCby EPSS–FIX 1.4.3 HIGH7.5SIPGO: DoS via unvalidated Content-Length in the stream parser in github.com/emiago/sipgogithub.com/emiago/sipgoPackage2026-06-30 15:51 UTCby EPSS–FIX 1.4.1 MEDIUMINCIDENTCloudflare: Cloudflare One Clients are incorrectly challenged on some sitesCloudflareVendor2026-09-22 19:23 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in snap-queue (PyPI)snap-queuePackage2026-09-22 18:42 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in poly-check-b (PyPI)poly-check-bPackage2026-09-22 18:41 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in crypto-trader-py (PyPI)crypto-trader-pyPackage2026-09-22 18:40 UTCby osv-malicious–UNINSTALL CRITICAL8.1EXPLOITEDwordpress: An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local…WordPress Core1 talkingRuntime2026-09-22 13:57 UTCby InfraStack Analyst1talkingFIX 7.1.2 NOT SCOREDNOT SCOREDNuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nucleigithub.com/projectdiscovery/nucleiPackage2026-09-22 17:17 UTCby Go vuln DB–WHAT TO DO MEDIUM5.3Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nucleigithub.com/projectdiscovery/nucleiPackage2026-07-16 20:24 UTCby EPSS–WHAT TO DO MEDIUM5.5Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nucleigithub.com/projectdiscovery/nucleiPackage2026-07-16 20:24 UTCby EPSS–WHAT TO DO MEDIUM5.3Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nucleigithub.com/projectdiscovery/nucleiPackage2026-07-16 20:24 UTCby EPSS–WHAT TO DO MEDIUM4.7Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nucleigithub.com/projectdiscovery/nucleiPackage2026-07-16 20:23 UTCby EPSS–WHAT TO DO MEDIUM6.3Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oraclegithub.com/traefik/traefikPackage2026-09-07 09:24 UTCby EPSS–WHAT TO DO MEDIUM6.5Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses in github.com/cloudreve/Cloudrevegithub.com/cloudreve/CloudrevePackage2026-09-14 11:18 UTCby EPSS–WHAT TO DO LOW3.8Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope in github.com/cloudreve/Cloudrevegithub.com/cloudreve/CloudrevePackage2026-09-14 11:18 UTCby EPSS–WHAT TO DO HIGH7.1Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service in github.com/cloudreve/Cloudrevegithub.com/cloudreve/CloudrevePackage2026-09-14 11:18 UTCby EPSS–WHAT TO DO MEDIUMINCIDENTSupabase: Supavisor connection disruptions in EU West 1 (Ireland)SupabaseVendor2026-09-22 11:09 UTCby status page–WHAT TO DO LOWINCIDENTSupabase: Project creations are degraded in multiple regionsSupabaseVendor2026-09-22 08:33 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in cloushaar-poc-exfil-91827 (PyPI)cloushaar-poc-exfil-91827Package2026-09-22 07:01 UTCby osv-malicious–UNINSTALL HIGHINCIDENTAnthropic: Elevated errors for multiple modelsAnthropicVendor2026-09-22 00:57 UTCby status page–WHAT TO DO HIGH7.5Duplicate Advisory: vllm p2p never connected zmq_exhaustionvllmAI agents & MCP2026-09-22 00:30 UTCby GitHub Advisories–FIX 0.30.0 HIGHNOT SCOREDCVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quicPackage2026-09-22by Vendor & lab pages–WHAT TO DO HIGH8.1AWS Connect Salesforce Lambda: missing authorization lets IAM principals bypass their permissionsVendor2026-09-22by EPSS–WHAT TO DO CRITICAL9.8EXPLOITEDf5 big-ip access policy manager: When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic…F5 BIG-IP APMInfrastructure2026-09-22by CISA KEV–WHAT TO DO CRITICAL10.0EXPLOITEDarista velocloud orchestrator: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access…VeloCloud Orchestrator On-Prem1 talkingVendor2026-09-22by InfraStack Analyst1talkingFIX 5.2.3.16 HIGH8.7s2n-quic: crafted UDP packet shuts down Retry-configured QUIC serversPackage2026-09-22by EPSS–WHAT TO DO HIGHNOT SCOREDCVE-2026-94384 - Missing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSServiceVendor2026-09-22by Vendor & lab pages–WHAT TO DO

Monday, Sep 21Tuesday, Sep 22Wednesday, Sep 23