account-takeover
1 live · 10 on record · last incident 5 days ago
Live1
- liveForgeRock Default Credentials on ForgeRock Servers Allow Vehicle Access
Research · since 9 Nov 2026
Security researchers discovered that default admin credentials on ForgeRock identity servers used by two car brands allowed complete account takeovers. This flaw enabled them to access customer accounts, unlock vehicle doors, and start engines.
Earlier9
- closed8.7Open WebUI CVE-2026-87995: Open WebUI XSS via terminal port-preview iframe sandbox misconfiguration
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87995
AI - closedFacebook Seth Rudetsky Loses Facebook Page in AI-Assisted Social Engineering Scam
Breaches & attacks · Exploited · since 18 Aug 2026
AI - closed8.2Open WebUI CVE-2026-70486: Open WebUI file-preview iframe vulnerability leads to account takeover
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70486
AI - closed8.5Open WebUI CVE-2026-56398: Stored XSS vulnerability in Open WebUI OAuth flow
Patch now · Disclosed · since 15 Jul 2026 · CVE-2026-56398
AI - closed8.7Flowise Flowise Unverified Email Change Vulnerability
Patch now · Disclosed · since 23 Jun 2026 · CVE-2025-71337
AI - closedMeta AI Support Bot Meta AI Support Bot Manipulated to Enable Instagram Account Takeovers
Patch now · Exploited · since 31 May 2026
AI - closed9.8Flowise CVE-2025-58434: Flowise Unauthenticated Password Reset Vulnerability
Patch now · Disclosed · since 12 Sep 2025 · CVE-2025-58434
AI - closedZoom Deepfake Video Call Impersonation Leads to Account Theft and Malware
Breaches & attacks · Real loss · since 19 Jun 2025
AI - closedChatGPT ChatGPT Account Compromise Leads to Exposure of Private Chat Logs
Breaches & attacks · Exploited · since 30 Jan 2024
AI