TThinkst Applied Research

Products

Exploited and recent CVEs

• CVE-2026-85219 Low 3.7 Denial-of-Service in the OpenCanary Redis service 0.4%
• CVE-2026-85220 Low 3.7 Denial-of-Service in the Thinkst Canary Redis service 0.4%
• CVE-2026-16551 Medium 6.9 Denial-of-Service in OpenCanary's MongoDB module 0.4%
• CVE-2026-13140 Low 1.1 Stored Cross-Site Scripting in Canarytokens.org 0.3%
• CVE-2026-12888 Low 2.0 HTML injection in the Canarytoken Google Chat notification 0.4%
• CVE-2026-11859 Low 2.0 HTML injection in the Canarytoken links email 0.3%
• CVE-2026-10729 Low 1.2 HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens 0.2%