CyberDragonIoT / ICS Threat Atlas

LiveRefresh

60 live recordsSource: CISA Known Exploited VulnerabilitiesSynced 2026-09-16 10:06 UTC

Date / TimeTypeMalware NameSHA256

2026-09-14 08:52 UTCKEVCisco Secure Email Gateway SQL Injection Vulnerabilitycve20267646166d22a44baae

2026-09-11 15:40 UTCKEVConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerabilitycve20268486966d22a44baae

2026-09-11 19:35 UTCKEVJFrog Artifactory Incorrect Authorization Vulnerabilitycve20264201666d22a44baae

2026-09-11 07:35 UTCKEVJFrog Artifactory Improper Authentication Vulnerabilitycve20264201866d22a44baae

2026-09-11 12:56 UTCKEVGitLab Community Edition and Enterprise Edition Path Traversal Vulnerabilitycve20268570666d22a44baae

2026-09-10 14:47 UTCKEVMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerabilitycve20268606066d22a44baae

2026-09-10 15:51 UTCKEVMikroTik RouterOS Missing Authentication for Critical Function Vulnerabilitycve20266727766d22a44baae

2026-09-09 07:38 UTCKEVCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerabilitycve20261949066d22a44baae

2026-09-09 13:39 UTCKEVFortinet Multiple Products Heap-based Buffer Overflow Vulnerabilitycve20252524966d22a44baae

2026-09-09 17:25 UTCKEVGoogle Chromium V8 Out of Bounds Write Vulnerabilitycve20268749166d22a44baae

2026-09-09 08:30 UTCKEVCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerabilitycve20262007966d22a44baae

2026-09-08 11:40 UTCKEVAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerabilitycve20267565066d22a44baae

2026-09-08 09:44 UTCKEVMicrosoft Windows Link Following Vulnerabilitycve20268196366d22a44baae

2026-09-08 19:55 UTCKEVN-able N-central Static Code Injection Vulnerabilitycve20268621866d22a44baae

2026-09-08 15:01 UTCKEVMicrosoft Windows Heap-Based Buffer Overflow Vulnerabilitycve20268588066d22a44baae

2026-09-04 11:27 UTCKEVGoogle Chromium V8 Type Confusion Vulnerabilitycve20268504666d22a44baae

2026-09-02 12:44 UTCKEVBerriAI LiteLLM Improper Authentication Vulnerabilitycve20265982266d22a44baae

2026-09-02 14:07 UTCKEVKludex Starlette HTTP Request/Response Smuggling Vulnerabilitycve20264871066d22a44baae

2026-09-14 08:52 UTCKEVCisco Secure Email Gateway SQL Injection Vulnerabilitycve20267646166d22a44baae

2026-09-11 15:40 UTCKEVConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerabilitycve20268486966d22a44baae

2026-09-11 19:35 UTCKEVJFrog Artifactory Incorrect Authorization Vulnerabilitycve20264201666d22a44baae

2026-09-11 07:35 UTCKEVJFrog Artifactory Improper Authentication Vulnerabilitycve20264201866d22a44baae

2026-09-11 12:56 UTCKEVGitLab Community Edition and Enterprise Edition Path Traversal Vulnerabilitycve20268570666d22a44baae

2026-09-10 14:47 UTCKEVMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerabilitycve20268606066d22a44baae

2026-09-10 15:51 UTCKEVMikroTik RouterOS Missing Authentication for Critical Function Vulnerabilitycve20266727766d22a44baae

2026-09-09 07:38 UTCKEVCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerabilitycve20261949066d22a44baae

2026-09-09 13:39 UTCKEVFortinet Multiple Products Heap-based Buffer Overflow Vulnerabilitycve20252524966d22a44baae

2026-09-09 17:25 UTCKEVGoogle Chromium V8 Out of Bounds Write Vulnerabilitycve20268749166d22a44baae

2026-09-09 08:30 UTCKEVCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerabilitycve20262007966d22a44baae

2026-09-08 11:40 UTCKEVAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerabilitycve20267565066d22a44baae

2026-09-08 09:44 UTCKEVMicrosoft Windows Link Following Vulnerabilitycve20268196366d22a44baae

2026-09-08 19:55 UTCKEVN-able N-central Static Code Injection Vulnerabilitycve20268621866d22a44baae

2026-09-08 15:01 UTCKEVMicrosoft Windows Heap-Based Buffer Overflow Vulnerabilitycve20268588066d22a44baae

2026-09-04 11:27 UTCKEVGoogle Chromium V8 Type Confusion Vulnerabilitycve20268504666d22a44baae

2026-09-02 12:44 UTCKEVBerriAI LiteLLM Improper Authentication Vulnerabilitycve20265982266d22a44baae

2026-09-02 14:07 UTCKEVKludex Starlette HTTP Request/Response Smuggling Vulnerabilitycve20264871066d22a44baae

Select or type to search a country

Last 7 DaysLast 30 Days

Top Countries for Attack Sources

United StatesChinaRussiaIndiaBrazilVietnamIndonesiaGermanyNetherlandsUnited Kingdom

Attack Classification

6,187 source events · last 7 days

Exploit attemptBrute forceReconnaissanceCommand & controlProtocol abuseMalware deliveryCredential accessDenial of serviceEnterprise→OT pivotLateral movementPrivilege escalationPersistenceEngineering workstation abusePLC / ICS write attemptOT safety guardrail tripFirmware / supply-chain tamperData exfiltrationKEV-matched scanningRansomware pre-positioningInitial access / phishing