SecuritySense

IOC Feed

83 indicators of compromise from 76 published reports. Filter by type, severity, or publish date, and export the full set as a STIX 2.1 bundle.

Provided for defensive use only.

Indicators of Compromise(83)
↓ Download all as STIX
SAWFLYCVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
BARECLAWCVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
ARMORY CASTLECVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
webshellCVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
backdoorCVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
SHA256dc14e215269a93fdbc4c1a80b984c23faf7af0911c6dbb85309796a6f2ae95fbCVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
SHA2561f19b9a27d79c11bda00a1e8faf74a7fdd683d38ccef1b60df2fd0307e3aa462CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass
SHA25605f69ae6b2b89c1c4dcf836bff032232f11bf0109f2b498e2345045d06139034CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
SHA2564dcb0202fe8b2d4d7b183764e38184cd6ed50132786cc7e7d1f7f4bce1dd6f3dCVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
SHA256481728a7c9c4c02be07051d9c1958d902ea6397ebb8952ab83944818e3d25d21CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
URLhttp://imagefiles-backup.oss-ap-southeast-7.aliyuncs.comCVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
Domainimagefiles-backup.oss-ap-southeast-7.aliyuncs.comCVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
IP51.195.127.124CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
Domainxmr.kryptex.networkCVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited
SHA25605f69ae6b2b89c1c4dcf836bff032232f11bf0109f2b498e2345045d06139034CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
SHA2564dcb0202fe8b2d4d7b183764e38184cd6ed50132786cc7e7d1f7f4bce1dd6f3dCVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
SHA256481728a7c9c4c02be07051d9c1958d902ea6397ebb8952ab83944818e3d25d21CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
URLhttp://imagefiles-backup.oss-ap-southeast-7.aliyuncs.comCVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
Domainimagefiles-backup.oss-ap-southeast-7.aliyuncs.comCVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
IP51.195.127.124CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
Domainxmr.kryptex.networkCVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited
IP176.65.148.184CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP92.246.139.83CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
Domainabcdefghijklmnopqrst.netCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://92.246.139.83/3CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://92.246.139.83/2CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://92.246.139.83/1CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttps://cta.edu.pe/wp-content/plugins/linux.binCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://puschl.langhaar-schaeferhunde.com/plugins/linux.binCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttps://casasmediterraneas.com/wp-content/plugins/linux.binCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttps://www.mediocasavolponi.com/wp-content/plugins/linux.binCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttps://cloud.calltop.com.br/apps/web/linux.binCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
SHA2560b8e037d160bdb0b621c975c424f680b814bc438fd492ae376ff3140e209e480CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
SHA2563928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aabCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
SHA256a5d9970129afd6e1874cbeafa08df65a3d3599862357ae48bdad211e0f47264aCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://0x1x2x3.top/CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
Domain0x1x2x3.topCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://cta.edu.pe/wp-content/plugins/linux.binCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
Domainfix.unknower.winCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://176.65.148.250:6556/okCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP176.65.148.250CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttp://fix.unknower.win/CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttps://kworker.eth.limo/kworker/apiCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
Domainkworker.eth.limoCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
URLhttps://kworker.eth.link/kworker/apiCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP167.179.119.120CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
Domainkworker.eth.linkCVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP216.98.10.60CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP34.70.205.211CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP2.26.99.68CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP95.85.237.149CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP193.41.68.194CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited
IP45.150.109.151CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
IP135.125.10.56CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
IP172.232.38.92CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domain45.150.109.151.sslip.ioCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domainauto.c3pool.orgCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
IP47.86.197.116CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domainyosemite.jpCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domaingobygo.netCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domainoast.meCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domainoast.proCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
Domainoast.funCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
IP194.213.18.133CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
SHA256f64b88e9318bdf23f2dd119a0ce1dd1bdb3c8cd2e0e1e23ba3ef2e19072b79ccCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
SHA25649fdcf32bfe837899a84e8938f0d07ae96ddd218a280a09eb60df8d64597bd8fCVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
SHA2563af9f25a4d45bb4f1ec5627cdbc6703cf3b4be75a892162d299d80ddfb266f42CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
SHA2563d24ac736635e0fa0c5c459c9e18ca09d1ec9a1751a4503130934395609bd7e0CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability
IP151.241.99.207CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability
IP151.241.99.233CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability
IP158.62.198.182CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability
IP192.142.10.99CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability
IP139.28.37.250CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability
MD57f74bb6ba185978134c318bc5f91d23cCVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA2562758f4d71a2a2dfdefab81737c2d776b2a3dafe5844fdd2157e089a28447ca98CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA1268a8420b791df46380ed9ad69905207e15d8a7cCVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA256479ae5fd7274439ddfa27bc03298ebfdfc5ff17f6412acccf74d4dbd90d94218CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA256874bcb1c3d050a5b5b333a2198f504fcb27927c2abdd43b07440188a380c52d5CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA25638353f95fff270f4e3a9d7add8c64666020dd668ce66e15969a736ec48cadc59CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA2564253dd1a4c0867b0be7732f75b2f630cebfb7fed94270e15fb3b12ae40546d01CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
SHA2569eaa577c8ba71646928c1c34c3145536b0498f65f26060a6ba00744bcef57644CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
IP193.8.187.42CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
IP85.11.187.8CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability