Security Overview

Real-time posture across your attack surface · Monday 13 July

2 critical findings require immediate remediation.

Risk Score

90

Critical Risk · 0–100 scale

Open Findings

10+11 30d

2 critical · 5 high

MTTR

0.0d

mean time to remediate

SLA Compliance

100%

3 resolved · 90d

Resolved

3

this month

Threat Intelligence

Latest CVEs

CVE-2026-40141CVSS 9.9EPSS 0%A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient valid…0 open findings

CVE-2026-40140CVSS 7.5BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied inpu…0 open findings

CVE-2026-40139CVSS 9.8A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote att…0 open findings

CVE-2026-40138CVSS 8.1A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a ne…0 open findings

CVE-2025-53831CVSS 8.2DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownCloud Classic. In DrawIO for ownCloud prior to version 1.0.2, which correspond…0 open findings

CVE-2026-5268CVSS 9.1An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass sec…0 open findings

CVE-2026-59196CVSS 7.1pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted lockfile alias could be joined directly under a hoisted node_modules directory. Traversal aliases could escape that directory, while r…0 open findings

CVE-2026-59195CVSS 8.2pnpm is a package manager. Prior to 10.34.4 and 11.8.0, pnpm accepts package names from the env lockfile configDependencies section and uses those names directly when creating config dependency symlin…0 open findings

CVE-2026-59194CVSS 7.1pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted patch entry could resolve outside the configured patches directory and cause pnpm patch-remove to delete an arbitrary reachable file. …0 open findings

CVE-2026-59152CVSS 5.0LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an attacker who can send an HTTP request to a server running the LangSmith SDK's TracingMiddleware can…0 open findings

CVE-2026-58203CVSS 5.3pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secrets_dir. When secrets_nested_sub…0 open findings

CVE-2026-13122CVSS 5.3OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when ext…0 open findings

CVE-2025-53830CVSS 9.1Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side…0 open findings

CVE-2025-53829CVSS 8.0ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path traversal vulnerability in …0 open findings

CVE-2025-53828CVSS 8.5SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, whic…0 open findings