Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability — Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a
2026 Data Breaches Year-to-Date (3095 indexed)
Infinite Campus
137,123 records exposed — Email addresses, Employers, Job titles, Names and 4 more
View incident → Indexed 2 months, 2 weeks ago
Oracle PeopleSoft Enterprise PeopleTools
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability — Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which c
Extortion-only attacks are increasing as data theft drives most ransomware claims, with
Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed
Ivanti Sentry
Ivanti Sentry OS Command Injection Vulnerability — Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level
University of Nottingham
454,635 records exposed — Academic records, Citizenship statuses, Dates of birth, Disabilities and 11 more
View incident → Indexed 2 months, 3 weeks ago
Google Chromium V8
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability — Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HT
Arista Extensible Operating System
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability — Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch
Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability — Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerab
BerriAI LiteLLM
BerriAI LiteLLM Command Injection Vulnerability — BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrar
Check Point Security Gateway
Check Point Security Gateway Improper Authentication Vulnerability — Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacke
Baker Distributing
102,935 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 2 months, 4 weeks ago
SolarWinds Serv-U
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability — SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: de
BCD Travel
396,313 records exposed — Email addresses, Employers, Job titles, Names and 3 more
View incident → Indexed 2 months, 4 weeks ago
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability —
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability — Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to a
DentaQuest
2,553,599 records exposed — Dates of birth, Email addresses, Genders, Government issued IDs and 4 more
Linux Kernel
Linux Kernel Improper Authentication Vulnerability — Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
Android Framework
Android Framework Integer Overflow Vulnerability — Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
Thousands of patient records stolen in ransomware attack, breach disclosed 6+ months
Thousands of patient records stolen in ransomware attack, breach disclosed 6+ months after notification
FirstClass
Sydney-based travel agency customer records allegedly breached, details posted on underground forums
Puerto Rico Government Agency
Government mapping service exposed 1 million Social Security numbers
Canada Life
Threat actor claims 5.5 million records exposed, customer/employee/corporate data
Ransomware attack
Ransomware attack exposed protected health data of 1.3 million people to dark web
Unnamed Elasticsearch database
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer log compilations