Vexday
by TrueHacking
Vulnerabilities
▾
Vulnerabilities
CVEs
420k vulnerabilities
CVE risk calculator
real risk of a CVE
Exploits
Cataloged PoCs, Nuclei and Metasploit
Exploit Timeline
risk queue
VexDay Proof
the seal for exploits that work
Overview
observatory
Intelligence
▾
Intelligence
Briefing
the day’s signal, at 9am
Board Intelligence
The day's cyber risk in one number the board understands
Threat Actors
587 groups tracked
Time-bomb CVEs
about to blow: patch now
Threats
ransomware · malware
Incidents
Breaches with a confidence seal
IOCs
live attack indicators
Threats to Brazil
victims and groups in Brazil
Exposure by sector
ransomware by sector in Brazil
Tools
▾
Tools
X-Ray
your stack vs. real attack
Infostealers on your domain
employees in infostealer logs
What attacks me?
the threats to your technology
Check IP
IP reputation in seconds
Check malicious site
the domain on threat lists
Check scam site
fake store? check first
Check shortened link
where does this link go?
Analyze phishing email
is this email a scam?
Analyze email header
is the sender spoofed?
Email breach check
breach monitoring
For business
▾
For business
For MSSPs
one operation, every client
Alerts
webhook, Slack and Discord in your system
MCP
Vexday inside your AI assistant
API
CVEs, KEV and EPSS as JSON, with a free key
Vexday Live
the SOC room screen, free
Plans and pricing
Starter, Pro, MSSP and Member
Briefing
Pricing
Live
Sign in
Create free account
PT
ES
EN
›
Live
Vulnerabilities
CVEs
CVE risk calculator
Exploits
Exploit Timeline
VexDay Proof
Overview
Intelligence
Briefing
Board Intelligence
Threat Actors
Time-bomb CVEs
Threats
Incidents
IOCs
Threats to Brazil
Exposure by sector
Tools
X-Ray
Infostealers on your domain
What attacks me?
Check IP
Check malicious site
Check scam site
Check shortened link
Analyze phishing email
Analyze email header
Email breach check
For business
For MSSPs
Alerts
MCP
API
Vexday Live
Pricing
Create free account
Sign in
PT
ES
EN
Home
/
Technologies
/
bank-vaults
Vulnerabilities in
bank-vaults
1 result
CVE-2026-54725
CRITICAL
vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API
EPSS
0.4%