Real-Time Threat Intelligence & CVE Tracker

Continuous monitoring and intelligence feed for newly disclosed Common Vulnerabilities and Exposures (CVEs).

100 CISA KEV Exploits Active 2 Vulnerabilities Monitored Live Feed Sync: Real-time

All Time Today 7 Days 30 Days 1 Year

All Operating Systems Servers Hypervisors Hosting Panels Billing CMS Plugins CRM ERP Databases Network / Firewall Mail Servers Web & Hosting Related

Filtered by category: Servers

Clear category filter

CVSS 9.0 - 10.0

Unscored

0

Pending Score

High-Impact Zero-Day Spotlight CRITICAL CVSS 9.8 2 months ago

CVE-2026-34486: Apache Tomcat Vulnerability

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

Vendor: Apache Fix: Vendor Patch / Mitigation Available

Analyze Advisory

Vulnerability Severity Distribution

2 total

Top Targeted Vendors & Stacks

Ranked

#1 Microsoft 18 #2 Hcltech 13 #3 Cisco 10 #4 Linux 3 #5 Fortinet 3 #6 Langflow 3 #7 Oracle 3 #8 SimpleHelp 3

Common Attack Vectors (Top CWEs)

CWE-89 SQL Injection (SQLi) CWE-79 Cross-Site Scripting (XSS) CWE-862 Missing Authorization CWE-94 Code Injection (RCE) CWE-287 Improper Authentication CWE-22 Path Traversal

Latest Security Vulnerabilities

CVE-2026-34486 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 2 months ago

Apache Tomcat Vulnerability

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

Vendor: Apache Product: Tomcat View Details

CVE-2026-34197 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 5 months ago

Apache ActiveMQ Vulnerability

Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.

Vendor: Apache Product: ActiveMQ View Details

Threat News & Incidents

HackerNews 1 month ago

Wallabag Full Disclosure CVSS8.5 Stored XSS+SSRF after no patched no cve

SecurityWeek 1 month ago

In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

SecurityWeek 1 month ago

Trivy, Not LiteLLM Behind the 2,500 Org Compromise

SecurityWeek 1 month ago

Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

SecurityWeek 1 month ago

1.6 Million Likely Impacted by RingCentral Data Breach

SecurityWeek 1 month ago

Over 1,000 Charities Hit by Beacon CRM Data Breach

SecurityWeek 1 month ago

14,000 Trezor Customers Impacted by Data Breach at ShipMonk

HackerNews 1 month ago

You're Back in the Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))