Cyber Threat Dashboard

Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.

4653Items

3084Last 7 days

1651Today

2132Critical + high

13/10/2026 23:40Last collection

CriticalVulnerability CVE-2026-74041

CVE-2026-74041 — Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-lo…

Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject …

CVSS 9.1

NVD · CVE récentes13/10/2026 16:17CWE-178

LowVulnerability CVE-2026-107832

CVE-2026-107832 — fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine…

fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowercase the enum or const header names nest…

CVSS 3.7

NVD · CVE récentes13/10/2026 16:17CWE-178

MediumVulnerability CVE-2026-108721

CVE-2026-108721 — Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that al…

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attacker…

CVSS 5.3

NVD · CVE récentes11/10/2026 15:17CWE-178