Skip to content
Signals
NVD · CVE-2026-18907 · Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filenameNVD · CVE-2026-18897 · 8.8 · A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempENVD · CVE-2026-18896 · 6.3 · A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.phNVD · CVE-2026-18895 · 8.8 · A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulCISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07CISA KEV · CVE-2026-34486 · 7.5 · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-18907 · Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filenameNVD · CVE-2026-18897 · 8.8 · A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempENVD · CVE-2026-18896 · 6.3 · A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.phNVD · CVE-2026-18895 · 8.8 · A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulCISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07CISA KEV · CVE-2026-34486 · 7.5 · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability · Added 2026-08-04 · Due 2026-08-07
Dragons Community

Enterprise feeds

Custom Feed Templates

Pre-configured intelligence feed templates that aggregate data from multiple API products. Enterprise-only.

All feed output is redacted and content-safe. JSON and CSV are future delivery formats. STIX output is planned for v1.1. TAXII is a mock/planned integration. No real feed delivery infrastructure exists in this phase.

Output formats

JSON

Planned

Structured JSON feed output

CSV

Planned

Flat CSV for spreadsheet import

STIX

Planned (v1.1)

STIX 2.1 bundle format

TAXII

Mock / Planned

TAXII 2.1 collection endpoint

Critical CVE Feed

High and critical severity CVEs with KEV status and EPSS scores. Ideal for vulnerability management teams needing priority alerts.

enterprise

Categories

CVE

Filters

severity: critical, high

cvss >= 7.0

publishedAt: last 30 days

Formats

jsoncsv

No exploit code or proof-of-concept payloads. CVSS scores and vendor advisories only.

Ransomware Claims Feed

New ransomware victim claims aggregated across mock monitoring sources. Sector and region filters available.

enterprise

Categories

Ransomware

Filters

status: unverified, confirmed

impactLevel: critical, high

claimDate: last 7 days

Formats

jsoncsv

No real victim data, leak site links or negotiation details. All claims are fictional.

Brand Mentions Feed

Dark web brand and domain mentions with severity scoring. Designed for brand protection and fraud prevention teams.

enterprise

Categories

Dark Web

Filters

mentionType: brand, domain, credential_claim

severity: medium, high, critical

Formats

jsoncsv

No real dark web URLs, credentials or stolen data. All content is fictional and redacted.

High Confidence IOC Feed

IOCs with high confidence and active status for automated blocking and detection rule generation.

enterprise

Categories

IOC

Filters

confidence: high

status: active

tlp: clear, green

Formats

jsoncsvstix

All indicators use RFC 5737 documentation ranges. No real malicious infrastructure. STIX output is planned.

Executive Briefing Feed

Consolidated daily briefing combining critical CVEs, active ransomware claims and high-severity dark web mentions.

enterprise

Categories

CVERansomwareDark WebThreat Actor

Filters

severity: critical, high

publishedAt: last 24 hours

Formats

json

Briefing content is editorially reviewed and safe for executive consumption. No technical exploit details.

Related

Custom Feed API product →API changelog →API settings →

Mock notice

Custom feeds are a mock catalog. No real feed delivery, scheduling or output generation exists. All templates are sample configurations.