NaNotecyber
Menu

Live operations view

Threat Intel

Exploited vulnerabilities, ransomware claims, botnet infrastructure and the news that explains them, pulled from public feeds every fifteen minutes.

JSON API
Exploited CVEs added · 7d11
Ransomware claims · 7d99thegentlemen · 14
Botnet C2 online1
SANS InfoconGREEN
  • CISA KEVlive
  • EPSSlive
  • ransomware.livelive
  • Feodolive
  • SANS ISClive
  • RSSlive

Live · Refreshed 32m

FijiTanzaniaW. SaharaCanadaUnited States of AmericaKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDem. Rep. CongoSomaliaKenyaSudanChadHaitiDominican Rep.RussiaBahamasFalkland Is.NorwayGreenlandFr. S. Antarctic LandsTimor-LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaCôte d'IvoireGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African Rep.CongoGabonEq. GuineaZambiaMalawiMozambiqueeSwatiniAngolaBurundiIsraelLebanonMadagascarPalestineGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumNetherlandsPortugalSpainIrelandNew CaledoniaSolomon Is.New ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusMoroccoEgyptLibyaEthiopiaDjiboutiUgandaRwandaBosnia and Herz.MacedoniaSerbiaMontenegroTrinidad and TobagoS. SudanUS · 31 ransomware claimsCA · 5 ransomware claimsBR · 5 ransomware claimsDE · 4 ransomware claimsRU · 3 ransomware claimsCO · 3 ransomware claimsAR · 3 ransomware claimsGB · 3 ransomware claimsIN · 3 ransomware claimsIT · 3 ransomware claimsJP · 2 ransomware claimsPH · 2 ransomware claimsKR · 2 ransomware claimsES · 2 ransomware claimsPT · 2 ransomware claimsFR · 2 ransomware claimsBA · 1 ransomware claimsRS · 1 ransomware claimsAT · 1 ransomware claimsNL · 1 ransomware claimsSG · 1 ransomware claimsUA · 1 ransomware claimsEG · 1 ransomware claimsAU · 1 ransomware claimsCL · 1 ransomware claimsTR · 1 ransomware claimsDK · 1 ransomware claimsPE · 1 ransomware claimsGE · 1 ransomware claimsSK · 1 ransomware claimsZA · 1 ransomware claimsUS · 1 C2 servers

Known exploited vulnerabilities

Newest entries in the CISA catalogue, with FIRST EPSS exploit probability.

CISA · FIRST

Most listed vendors · 30d

  • Microsoft6
  • Cisco2
  • Citrix2
  • Google2
  • JFrog2
  • Linux2
  • CVE-2026-86060added 2026-09-10

    MikroTik RouterOS · MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

    EPSS 0%
  • CVE-2026-67277added 2026-09-10

    MikroTik RouterOS · MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

    EPSS 0%
  • CVE-2026-87491added 2026-09-09

    Google Chromium V8 · Google Chromium V8 Out of Bounds Write Vulnerability

    EPSS 1%
  • CVE-2026-20079added 2026-09-09

    Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management · Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    EPSS 75%
  • CVE-2026-19490added 2026-09-09

    Citrix NetScaler · Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

    EPSS 6%
  • CVE-2025-25249added 2026-09-09

    Fortinet Multiple Products · Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

    EPSS 2%
  • CVE-2026-86218added 2026-09-08

    N-able N-central · N-able N-central Static Code Injection Vulnerability

    EPSS 1%
  • CVE-2026-85880added 2026-09-08

    Microsoft Windows · Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    EPSS 1%
  • CVE-2026-81963added 2026-09-08

    Microsoft Windows · Microsoft Windows Link Following Vulnerability

    EPSS 1%
  • CVE-2026-75650added 2026-09-08

    Adobe Commerce and Magento · Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

    EPSS 2%
  • CVE-2026-85046added 2026-09-04

    Google Chromium V8 · Google Chromium V8 Type Confusion Vulnerability

    EPSS 1%
  • CVE-2026-9586added 2026-09-02

    Sangoma Switchvox · Sangoma Switchvox SQL Injection Vulnerability

    EPSS 12%
  • CVE-2026-83549added 2026-09-02

    SonicWall SMA1000 Appliances · SonicWall SMA1000 Appliances OS Command Injection Vulnerability

    EPSS 9%
  • CVE-2026-83548added 2026-09-02

    SonicWall SMA1000 Appliances · SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    EPSS 5%
  • CVE-2026-82329added 2026-09-02

    JFrog Artifactory · JFrog Artifactory Improper Authentication Vulnerability

    EPSS 8%
  • CVE-2026-59822added 2026-09-02

    BerriAI LiteLLM · BerriAI LiteLLM Improper Authentication Vulnerability

    EPSS 1%
  • CVE-2026-49869added 2026-09-02

    Kestra Kestra OSS · Kestra OSS OS Command Injection Vulnerability

    EPSS 2%
  • CVE-2026-48710added 2026-09-02

    Kludex Starlette · Kludex Starlette HTTP Request/Response Smuggling Vulnerability

    EPSS 36%
  • CVE-2026-82078added 2026-08-31

    PaperCut NG/MF · PaperCut NG/MF Unsafe Reflection Vulnerability

    EPSS 2%
  • CVE-2026-81578added 2026-08-31

    PaperCut NG/MF · PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

    EPSS 2%
  • CVE-2026-66384added 2026-08-27

    JFrog Artifactory · JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

    EPSS 1%
  • CVE-2026-53362added 2026-08-27

    Linux Kernel · Linux Kernel Unspecified Vulnerability

    EPSS 1%
  • CVE-2023-49105added 2026-08-27

    ownCloud ownCloud · ownCloud Improper Authentication Vulnerability

    EPSS 43%
  • CVE-2026-8452added 2026-08-26

    Citrix NetScaler ADC and NetScaler Gateway · Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    EPSS 2%
  • CVE-2022-0995added 2026-08-26

    Linux Kernel · Linux Kernel Out-of-Bounds Write Vulnerability

    EPSS 10%
  • CVE-2021-23758added 2026-08-26

    Ajax.NET Professional Ajax.NET Professional · Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

    EPSS 84%
  • CVE-2019-1068added 2026-08-26

    Microsoft SQL Server · Microsoft SQL Server Remote Code Execution Vulnerability

    EPSS 53%
  • CVE-2015-5287added 2026-08-26

    Red Hat Automatic Bug Reporting Tool · Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    EPSS 5%
  • CVE-2015-3246added 2026-08-26

    Red Hat Libuser · Red Hat Libuser Race Condition Vulnerability

    EPSS 9%
  • CVE-2026-60004added 2026-08-25

    Gitea Gitea · Gitea Code Injection Vulnerability

    EPSS 87%