LIVE · cybersecurity feed
Live wire
Attackers conceal phishing lures using invisible Unicode charactersCVE-2026-67276 · Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”CVE-2026-81578 · PaperCut NG/MF Flaw Exploited Before CVE PublicationCVE-2026-82078 · PaperCut NG/MF Flaw Exploited Before CVE PublicationCVE-2026-83549 · SonicWall SMA1000 OS Command Injection Exploited Same Day as DisclosureCVE-2026-83548 · SonicWall SMA1000 SSRF Flaw Exploited Same Day as DisclosureCVE-2026-82329 · JFrog Artifactory Flaw Exploited Same Day as DisclosureMikroTik Routers Compromised Via Unauthenticated SSH AccessOpenAI Announced $1B in Defensive Tools for Water UtilitiesAttackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
vendor

Trychroma

4 CVEs published in the last four months. Exploited flaws first.

Critical0
High4
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-458308.8highchromadbA lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authentica86d ago
CVE-2026-458318.8highchromadbThe SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python proje86d ago
CVE-2026-458328.8highchromadbAll V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the author86d ago
CVE-2026-458338.8highchromadbA code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated a86d ago

Filter the full tracker by Trychroma →