Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Back
CWE-862 - Missing Authorization
CWE Weakness
Threat entity extracted from intelligence sources
Oct 11: 4 mentions
Oct 12: 0 mentions
Oct 13: 3 mentions
Oct 14: 4 mentions
Oct 15: 2 mentions
Oct 16: 2 mentions
Oct 17: 0 mentions
Oct 11
Oct 14
Oct 17
Entities
›
cwe
›
CWE-862 - Missing Authorization
Frequency
501
occurrences
First Seen
April 14, 2026
Last Seen
October 16, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Malware
Anubis
Tools
Google Chrome
GitHub Actions
Curl
Claude
Docker
Tornado Cash
Nginx
GitHub Copilot
CVEs
CVE-2026-44756
CVE-2026-41178
CVE-2026-55255
CVE-2026-50151
CVE-2026-48978
CVE-2026-37236
CVE-2026-26083
CVE-2026-85880
Regions
South Korea
China
United States
Russia
India
Sectors
Government
Healthcare
Financial
Retail
Manufacturing
Energy
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
3
IA
Initial Access
T1078 - Valid Accounts
T1566 - Phishing
T1190 - Exploit Public-Facing Application
3
EX
Execution
T1059 - Command and Scripting Interpreter
T1053 - Scheduled Task/Job
T1203 - Exploitation for Client Execution
3
PE
Persistence
T1505.003 - Web Shell
T1574 - Hijack Execution Flow
T1136 - Create Account
2
PE
Priv Esc
T1068 - Exploitation for Privilege Escalation
T1055 - Process Injection
-
DE
Defense Evasion
No techniques detected
2
CA
Cred Access
T1003 - OS Credential Dumping
T1110 - Brute Force
-
DI
Discovery
No techniques detected
1
LM
Lateral Mov
T1021 - Remote Services
-
CO
Collection
No techniques detected
1
C2
C2
T1071 - Application Layer Protocol
2
EX
Exfil
T1041 - Exfiltration Over C2 Channel
T1567 - Exfiltration Over Web Service
2
IM
Impact
T1486 - Data Encrypted for Impact
T1485 - Data Destruction
20
techniques detected across
9
tactics
Related Clusters (50)
Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation
Sep 16
·
62 sources
89
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
May 14
·
94 sources
87
Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches
Sep 13
·
2 sources
81
Critical Flaws in Veeam and Terraform MCP Require Immediate Patching
Aug 5
·
2 sources
78
CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices
Apr 26
·
3 sources
78
Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access
Aug 20
·
6 sources
78
Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access
Sep 8
·
1 sources
78
Critical Vulnerabilities in Veeam Software Expose Systems to Remote Attacks
Aug 5
·
2 sources
78
Critical Vulnerability in Cline Kanban Exposes AI Coding Agents to Hijacking
May 7
·
4 sources
75
Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems
Jul 28
·
1 sources
75
Critical Vulnerability in phpMyFAQ Allows Privilege Escalation
Jun 21
·
1 sources
74
Critical Code Execution Vulnerability in Mistral Affects Multiple Ubuntu Releases
Jun 11
·
2 sources
74
UK Immigration Officer Convicted for Spying for Chinese Intelligence
May 7
·
27 sources
74
AI Audit Reveals 990 Vulnerabilities in South Korea's e-Government Software
Jul 14
·
2 sources
74
Multiple CVEs Disclosed on September 8, 2026, Affecting Microsoft Products
Sep 8
·
927 sources
74
Israeli Emergency Agencies Exposed by Cybersecurity Failures, State Comptroller Reports
May 27
·
3 sources
74
Critical WordPress Plugin Vulnerabilities Expose Sites to Severe Attacks
Sep 14
·
15 sources
73
Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress
Jul 20
·
46 sources
73
Critical Tomcat Vulnerabilities Affecting Multiple Ubuntu Releases
Jun 10
·
15 sources
73
Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed
Sep 8
·
61 sources
73
Critical Cleo Harmony Vulnerability Exploited for Privilege Escalation
Sep 2
·
4 sources
73
Funnel Builder Plugin Vulnerability Exploited in WooCommerce Attacks
May 15
·
4 sources
73
Active Exploitation of Microsoft AD FS Vulnerability CVE-2026-56155 Detected
Jul 15
·
3 sources
73
Critical RCE Vulnerabilities Discovered in Fortinet Products
May 12
·
60 sources
73
Critical Vulnerabilities in Fedora Chromium Browser Affecting Multiple Versions
Sep 8
·
8 sources
73
Critical Vulnerabilities Found in Vertiv UPS Network Cards
Jun 9
·
3 sources
73
Critical Vulnerabilities in SimpleHelp Software Exploited
Apr 27
·
0 sources
73
Critical Vulnerability in syracom AG 2FA Plugin for Atlassian Products
Jun 17
·
1 sources
73
Critical Privilege Escalation Vulnerabilities in LiteLLM Disclosed
May 22
·
2 sources
73
Critical Security Flaws in Vaultwarden Affecting Fedora 43 and 44
Jun 12
·
4 sources
73
Critical RabbitMQ Vulnerabilities Enable Broker Takeover via OAuth Secrets
Jul 13
·
4 sources
73
Critical Vulnerability in Claude Code GitHub Actions Exposes Repositories to Attacks
Jun 2
·
16 sources
73
Critical Vulnerabilities in Exposed MCP Servers Threaten Sensitive Data
Jul 29
·
2 sources
73
Critical GitLab Vulnerability Allows Unauthenticated Data Deletion
Aug 18
·
23 sources
72
Critical CVE-2026-76658 Vulnerability in HPE Fabric Composer
Sep 2
·
2 sources
72
Acer Addresses Critical Zero-Day Vulnerabilities in Wave 7 Routers
Jun 4
·
4 sources
72
Critical Gitea Vulnerability Exposes Server Files to Unauthenticated Attackers
Aug 5
·
3 sources
72
Cisco Patches Nine Critical Flaws, Five Rated CVSS 10.0
Aug 21
·
5 sources
72
High-Risk Vulnerabilities in Home Assistant Exposed
Jun 24
·
1 sources
72
Critical Vulnerabilities Found in Traefik and Grafana Require Immediate Patching
Aug 18
·
1 sources
72
Critical SAP Vulnerabilities Require Immediate Patching
Jun 9
·
4 sources
72
Critical RCE Vulnerabilities Discovered in Npm tidgi and WP Ultimate CSV Importer
Jul 16
·
7 sources
72
CERT-In Alerts Apple Users of Critical Security Flaws in Devices
Jul 1
·
2 sources
72
Multiple Vulnerabilities in Linux Kernels Affecting Red Hat and Ubuntu Systems
Aug 3
·
3 sources
72
AI Discovers 38 Vulnerabilities in OpenEMR Healthcare Software
Apr 29
·
2 sources
72
Critical Vulnerabilities Found in Apache Traffic Server: Immediate Patching Required
Jul 30
·
2 sources
72
Critical PostgreSQL Vulnerabilities Disclosed Affecting Multiple Versions
Aug 20
·
2 sources
72
Critical Vulnerabilities Found in TP-Link Tapo C200 Cameras
Sep 16
·
14 sources
72
Critical SQL Injection Vulnerability in Ghost CMS Exploited
May 24
·
0 sources
72
Langflow IDOR Exploit and Critical Vulnerabilities Targeting AI Platforms
Jul 25
·
2 sources
72
Prev
1 / 10
Next
Related Articles (50)
Nivocart Issues 26
github.com
·
1d ago
Thinkcmf Admin Rest Api Missing Authorization
hackmd.io
·
1d ago
Papermerge Core Issues 1290
github.com
·
2d ago
H1ue Ahi Me
hackmd.io
·
2d ago
6 Ways To Prevent Privilege Escalation Attacks
www.techtarget.com
·
2d ago
Makunet Maku Boot 4.3.0 Through 5.0.0 Missing Authorization Via Mail And Sms Config Endpoints
www.vulncheck.com
·
2d ago
Maku Boot Mail Sms Config Bfla
hackmd.io
·
2d ago
SAP patches critical Python SDK flaw that could expose OAuth credentials
Computing
·
3d ago
Docker Hub Security Advisory Cve 2026 105445
www.docker.com
·
3d ago
Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most ...
Blog.Checkpoint
·
3d ago
SAP warns of maximum severity OAuth2 SSRF security flaw
Bleepingcomputer
·
3d ago
Amoylab Unla Oauth Self Issued Token Authz
hackmd.io
·
5d ago
Rill Oauth Open Registration Long Lived Token
hackmd.io
·
5d ago
Wukong Hrm Through Commit 186115e Missing Authorization Via Employeeaspect And Employeeutil
www.vulncheck.com
·
5d ago
Jeecgboot Through 3.9.5 Missing Authorization Via Savedeptrolepermission Endpoint
www.vulncheck.com
·
5d ago
Proftpd Modcopy Exec
www.rapid7.com
·
Oct 8
Ai Isnt Your Breach Risk Your Oauth Sprawl Is
www.nudgesecurity.com
·
Oct 8
Web applications
securis360.com
·
Oct 8
Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
Cybersecuritynews
·
Oct 8
Oasis Security analyzed that
oasis-security.io
·
Oct 7
Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
Cybersecuritynews
·
Oct 7
Mooncake Store Through 0.3.13 Post1 Missing Authorization Via Evictdiskreplica Rpc
www.vulncheck.com
·
Oct 6
Serious Unauthorized Access Flaw Detected in Ubuntu OpenStack Aodh Watcher
Linuxsecurity
·
Oct 5
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Feeds.Feedburner
·
Oct 5
Denmark's CPR breach exposes 8.8 million people as experts warn over trusted third
Itsecurityguru
·
Oct 5
Base Vault Hack: $6 Million via a Permission List
Cryptoticker
·
Oct 5
GHSA Mpq9 V47x 3hw8
github.com
·
Oct 3
Dell asks admins to patch max severity CSM flaws as soon as possible
Bleepingcomputer
·
Oct 2
32
github.com
·
Oct 1
Supply chain attacks are turning MSP access into a weapon | news
Channele2E
·
Sep 30
TeamViewer urges users to patch severe flaws “as soon as possible”
Bleepingcomputer
·
Sep 30
WEB https://www.sailpoint.com/security-advisories/
www.sailpoint.com
·
Sep 29
Gpo Abuse Exploiting Vulnerable Group Policy Objects
www.hackingarticles.in
·
Sep 29
1e476832e48bcdb2b4f732689dfeac0c
gist.github.com
·
Sep 29
Over 16,000 Supabase databases expose PII, passwords, auth tokens
Bleepingcomputer
·
Sep 28
NHS Trust removes 10 people amid concerns over Noah Woods 'data breach'
Thisislocallondon
·
Sep 27
The August 2026 Security Update Review
www.zerodayinitiative.com
·
Sep 26
Security Bulletin node/7288641
www.ibm.com
·
Sep 25
Privacy Commissioner splits cyber responsibility between two organisations
Insurancebusinessmag
·
Sep 23
CVE Alert: CVE-2026-17618 – IBM – Financial Transaction Manager (FTM) for RedHat OpenShift
Redpacketsecurity
·
Sep 23
CVE Alert: CVE-2026-63104 – usekaneo
Redpacketsecurity
·
Sep 23
Own a GIGABYTE motherboard? Update the Control Center software now as multiple ...
Tweaktown
·
Sep 22
CVE-2020
Sploitus
·
Sep 22
Siemba brings continuous IDOR testing to production APIs
Helpnetsecurity
·
Sep 21
CVE-2026-94213 — MEDIUM (CVSS 4.9)
Ervik.As
·
Sep 21
CVE-2026-94217 — LOW (CVSS 3.5)
Ervik.As
·
Sep 21
coinfomania.com
coinfomania.com
·
Sep 20
Siemba Automates IDOR Detection Across Live APIs
Prnewswire
·
Sep 20
CVE-2026-93971: SxDevOps Information Disclosure (CVSS 5.3)
Strix.Ai
·
Sep 20
Fetch.ai Suffers $2M Loss Following Security Flaw Discovery
Cryptonews
·
Sep 20
Prev
1 / 10
Next
Related Entities
Data Breach
Zero-day Exploit
Phishing
Sql Injection
DDoS
Malware
Ransomware
Supply Chain Attack
Denial of Service
Cross-Site Scripting (xss)
Server-Side Request Forgery (ssrf)
Privilege Escalation
,p_Ii9kYXRhYmFzZS93b3JkcHJlc3MvcGx1Z2luL3dwLXVsdGltYXRlLWNzdi1pbXBvcnRlci92dWxuZXJhYmlsaXR5L3dvcmRwcmVzcy13cC11bHRpbWF0ZS1jc3YtaW1wb3J0ZXItd29yZHByZXNzLWltcG9ydC1leHBvcnQtZm9yLWNzdi14bWwtZXhjZWwtcGx1Z2luLTgtMC0xLW1pc3NpbmctYXV0aG9yaXphdGlvbi10by1hdXRoZW50aWNhdGVkLXN1YnNjcmliZXItcmVtb3RlLWNvZGUtZXhlY3V0aW9uLXZ1bG5lcmFiaWxpdHki,s_IY_67C9Hsg-wg38K.png)
