CVE-2026-18952: Server-Side Request Forgery (SSRF)

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2025-53862

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:40+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-1491

creationtimestamp| type| source ---|---|--- 2025-03-01 13:27:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6075 2025-03-01 16:27:04+00:00| seen| https://t.me/cvedetector/19238 2025-03-02 11:46:59+00:00| seen| Telegram/fQwhT3m-JQIcT-R9UMsIx5GWX6a33IPjwKCBE6dg2xBQgVw 2025-08-19...

Announcing the Microsoft Graph Security Hackathon winners

Bringing together information from multiple disconnected security systems to solve today’s security challenges is complex. We recently asked Microsoft Graph Security Hackathon participants to come up with innovative solutions using the Microsoft Graph Security API, and they did not disappoint. We...