PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

CISA KEV additions, CISA industrial advisories and CERT-EU advisories. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

61 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates · Some delayed

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  3. CISA · Industrial

    Meari IoT Cloud Platform OpenAPI Service

    Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization.

    CVE-2026-101104CVE-2026-96613
    Read original (opens in a new tab)
  7. CISA · Industrial

    Toptech TMS7 and TopHAT

    Successful exploitation of these vulnerabilities could allow an attacker to access critical data or execute arbitrary code.

    CVE-2026-71379CVE-2026-70356CVE-2026-72510CVE-2026-63713CVE-2026-68954+5 more in the original
    Read original (opens in a new tab)
  8. CISA · Industrial

    VIVOTEK Camera Firmware

    Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.

    CVE-2026-22755
    Read original (opens in a new tab)
  10. CISA · Industrial

    Anjvision YSSD-RTMP-H5

    Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device.

    CVE-2026-100291CVE-2026-100292CVE-2026-100293CVE-2026-100294CVE-2026-100295+4 more in the original
    Read original (opens in a new tab)
  13. CISA · Industrial

    Hitachi Energy Asset Suite

    Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause confidentiality, integrity and availability impact on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

    CVE-2026-7395CVE-2026-11796
    Read original (opens in a new tab)
  14. CISA · Industrial

    Hitachi Energy SOI

    Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

    CVE-2026-34197
    Read original (opens in a new tab)
  15. CISA · Industrial

    Hitachi Energy REB500

    Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

    CVE-2024-8176CVE-2025-59375
    Read original (opens in a new tab)
  16. CISA · Industrial

    Hitachi Energy RTU500

    Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the cybersecurity requirements, threat landscape, and industry practices that existed at the time of their release. As cybersecurity threats and security expectations have evolved, these end-of-life versions no longer incorporate many of the se…

    CVE-2026-8065CVE-2026-8066CVE-2026-8067CVE-2010-2965CVE-2014-9195+1 more in the original
    Read original (opens in a new tab)
  18. CERT-EU

    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

    On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild. CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.

    Read original (opens in a new tab)
  24. CISA · Industrial

    Botslab G980H Dashcams

    Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, disrupt device operation.

    CVE-2026-84399CVE-2026-82566CVE-2026-85496CVE-2026-77967CVE-2026-88761+9 more in the original
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.