Get a Demo

Research > Threat Research

Endor Labs Threat Research

Move beyond CVE lists with enriched vulnerability intelligence, reachability and exploitability context, and built-in remediation—including drop-in patches when upgrades aren’t an option.

Glowing green digital graphic depicting an unlocked padlock and a warning symbol. Text reads "CVE-2026-XXXXX", suggesting cybersecurity vulnerability.
0
Sort by Severity Level
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

CVEs

0
Fix Available

CVE-2026-69085

SiYuan before v3.7.3 SQL Injection via searchDocs

EPSS Score
0.16667
9.6
Fix Available

CVE-2026-54725

vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

EPSS Score
0.2482
9.4
Fix Available

CVE-2026-63221

CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions

EPSS Score
0.30826
0
Fix Available

CVE-2025-71401

better-auth before 1.4.2 basePath Modification DoS

EPSS Score
0.17843
0
Fix Available

CVE-2026-66418

OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

EPSS Score
0.26727
ENDOR LABS PATCHES

Get Your First
3 Patches Free

Book a Demo

Latest Research

CVE-2026-25896: Entity Encoding Bypass in fast-xml-parser
Read now
AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass
Read now
ENDOR LABS PATCHES

Fix Vulnerabilities Without Upgrading

Book a Demo

How Endor Patches work

Security fixes are often several versions ahead—bundled with changes that can break your code.
Endor Patches deliver the maintainer-approved fix, tested for compatibility with older versions. Get just the security fix now, and upgrade on your timeline.
Diagram showing a backported security patch (version 1.1-endor-latest) applied to version 1.1, letting you fix a vulnerability now and upgrade to the patched version 1.4 later.

See for yourself why Endor Labs is the fastest growing AppSec company ever

This is some text inside of a div block.
Sort by Risk Level
Sort by Risk Level