threat/intelligence

Index

All dossiers

Every published dossier and chain dossier. Filter by exploitation status or vendor.

StatusAll Active exploitation PoC public Patched, monitoring Archived

VendorAll Adobe BerriAI BeyondTrust Cisco Citrix Collabora Drupal GitLab Ivanti Linux Node.js (Google Brotli)PHP Group SonicWall WordPress

Dossiers

CVE-2026-102764CRITICAL

BeyondTrust Remote Support authentication bypass (CVE-2026-102764) exploited as zero-day

Unauthenticated file operations on BeyondTrust Remote Support up to 26.2.3, exploited since 2026-08 by suspected PRC-nexus actor ARMORY CASTLE.

Updated 2026-11-11

Chain dossiers

No published chain dossiers match these filters.