NEW A2
95 CVE-2026-70125
Critical
CVSS
8.8
EPSS
0%
Archive view — this data may be outdated.
CTI status
Joel Traber AG
As of:
Last pipeline run:
Status High
All threats
Sorted by KEV · Risk · EPSSAdmiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
ShinyHunters C3
20 Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data
This is not a patch issue but an active campaign: attackers use phone calls and unmanaged BYOD devices to gain initial access, leverage the Microsoft Graph API to pick targets, and hand the resulting access to extortion groups such as ShinyHunters.
High
NEW A3
20 CVE-2026-4638
A non-read-only PRTG user can read the stored Windows/domain password in plaintext from the sensor error output without requiring code execution or memory corruption.
High
EPSS
0%
NEW A3
20 Microsoft Outlook: Vulnerability allows code execution
High
NEW Storm-2570 B3
20 Beyond the ransomware: Tracking Storm-2570's consistent tradecraft across deployments
Attacks can be detected more reliably via Storm-2570's recurring tool and behaviour chain than via the specific ransomware payload that is used.
High
Nightmare-Eclipse C3
17 Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit
The new ShieldCrash exploit bypasses the already released patch for the Windows Defender ShieldBreak vulnerability (CVE-2026-69414), meaning public exploit code now exists that undermines the previous mitigation.
High
A3
0 Adobe Creative Cloud (Lightroom Classic): Multiple vulnerabilities enable code execution
The BSI report describes multiple vulnerabilities in Adobe Lightroom Classic that enable code execution, without any known active exploitation.
Medium
NEW A3
0 [UPDATE] Linux Kernel: Multiple Vulnerabilities
Low
A3
0 Microsoft Excel (2016), Office (2019, 2021 and 2024) and 365 Apps: vulnerability allows code execution
The advisory contains no CVE ID and no exploitation status, so prioritisation is only possible via the regular Microsoft patch cycle.
Medium
NEW A3
0 CVE-2026-4637
The real risk is not the XSS itself but the fact that the PRTG session cookie lacks the HttpOnly flag, allowing it to be read and exfiltrated via JavaScript , an indication of broader hardening gaps in the web interface.
Medium
EPSS
0%
NEW A3
0 Paessler PRTG: Multiple Vulnerabilities
The report bundles multiple vulnerabilities in PRTG that together enable XSS, bypass of security measures, and information leaks; exact versions and severity levels are missing.
Medium
NEW A3
0 sudo: Vulnerability allows code execution
Medium
NEW A3
0 CVE-2026-93270
The report describes a kernel vulnerability in the BPF interpreter that can lead to a page fault and kernel oops when using BPF_ADDR_PERCPU.
Medium
EPSS
0%
A3
0 Adobe Creative Cloud Applications: Multiple Vulnerabilities
Exploitation requires user interaction, making these vulnerabilities particularly interesting for targeted phishing attacks on creative workstations.
Medium
A3
0 Google Chrome: Multiple Vulnerabilities
Medium
A3
0 7-Zip: Vulnerability Enables Code Execution
The vulnerability lies in XZ decompression and can therefore be triggered via crafted archives from arbitrary sources (email, downloads, removable media), expanding the attack surface beyond mere file extraction.
Medium
NEW A3
-10 [UPDATE] util-linux: Multiple Vulnerabilities
Medium