Operation Bleeding Bear
Elastic Security verifies new destructive malware targeting Ukraine: Operation Bleeding Bear
Threat Intelligence Feed
Aggregating 9476 articles from trusted cybersecurity sources
LATEST CVEs
HIGH · CVE-2026-17196
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all ve
MED · CVE-2026-107450
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_li
CVE-2026-107449
linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enha
CVE-2023-5649
An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a
CVE-2023-5648
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL
CVE-2026-94584
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions befor
CVE-2026-94580
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage
CVE-2026-94575
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-
CVE-2026-87688
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS admin
CVE-2026-87687
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug
CVE-2026-87685
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions b
CVE-2026-87675
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions bef
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.
CVE-2026-87673
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versi
CVE-2026-87667
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS ver
CVE-2026-87666
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions bef
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of
CVE-2026-107448
Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a
MED · CVE-2026-107446
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-boun
MED · CVE-2026-107445
A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when acces
MED · CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l
CVE-2026-94583
A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric
CVE-2026-94582
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabri
CVE-2026-94578
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Author
CVE-2026-92862
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application t
CVE-2026-92861
The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an
CVE-2026-87686
An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabri
CVE-2026-87684
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before
CVE-2026-87678
An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versio
CVE-2026-87676
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions befor
CVE-2026-87672
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS v
CVE-2026-87671
An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0
CVE-2026-87670
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The intern
CVE-2026-87669
A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releas
CVE-2026-87668
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions bef
CVE-2026-87665
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabr
CVE-2026-87659
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions bef
MED · CVE-2017-20283
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Impr
CVE-2026-87726
Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with
CVE-2026-87683
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver
Latest News
Exploring the REF2731 Intrusion Set
The Elastic Security Labs team has been tracking REF2731, an 5-stage intrusion set involving the PARALLAX loader and the NETWIRE RAT.
EMOTET Dynamic Configuration Extraction
Elastic Security Labs discusses the EMOTET trojan and is releasing a tool to dynamically extract configuration files using code emulators.
Security operations: Cloud monitoring and detection with Elastic Security
As companies migrate to cloud, so too do opportunist adversaries. That's why our Elastic Security team members have created free detection rules for protecti...
Analysis of Log4Shell vulnerability & CVE-2021-45046
In this post, we cover next steps the Elastic Security team is taking for users to continue to protect themselves against CVE-2021-44228, or Log4Shell.
Forecast and Recommendations: 2022 Elastic Global Threat Report
With the release of our first Global Threat Report at Elastic, customers, partners, and the security community at large are able to identify many of the focu...
Deep dive into the TTD ecosystem
This is the first in a series focused on the Time Travel Debugging (TTD) technology developed by Microsoft that was explored in detail during a recent indepe...
KNOTWEED Assessment Summary
KNOTWEED deploys the Subzero spyware through the use of 0-day exploits for Adobe Reader and the Windows operating system. Once initial access is gained, it u...
Behind the scenes: The making of a Global Threat Report
What was our approach and process for creating a global threat report?
2022 Elastic Global Threat Report: Helping security leaders navigate today’s threat landscape
A significant percentage of all cyber threats achieve a degree of success against technical, procedural, and human mitigations. So what is a company to do in...
2022 Elastic Global Threat Report Announcement
Discover our latest findings & strategic recommendations to better stay informed of potential directions threat actors may focus on.
Sneak Peek: Elastic’s 2022 Global Threat Report
Elastic Security Labs has compiled the 2022 Global Threat Report to share trends and tactics adversaries and attack groups use, as observed by our threat res...
Data Breaches
No articles found.