Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

4273 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
BREACH 15 May 2026 ransomwarelive
Ransomware: abyss claims technic.com (US) — Technology
BREACH 15 May 2026 ransomwarelive
Ransomware: cmdorganization claims Goodstone Group (AU) — Not Found
BREACH 15 May 2026 ransomwarelive
Ransomware: morpheus claims BAYTECH A/S (DK) — Business Services
CVE 15 May 2026 nvd
CVE-2020-37168 (CVSS 9.8) — Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that a...
CVE 15 May 2026 nvd
CVE-2026-41225 (CVSS 9.1) — A vulnerability exists in iControl REST where a highly privileged, authenticated attacker...
CVE 15 May 2026 nvd
CVE-2026-8181 (CVSS 9.8) — The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)...
CVE 15 May 2026 nvd
CVE-2026-6271 (CVSS 9.8) — The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all vers...
CVE 15 May 2026 nvd
CVE-2026-6510 (CVSS 9.8) — The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing ...
CVE 15 May 2026 nvd
CVE-2026-6512 (CVSS 9.1) — The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versi...
CVE 15 May 2026 nvd
CVE-2025-11024 (CVSS 9.8) — Improper neutralization of special elements used in an SQL command ('SQL injection') vuln...
CVE 15 May 2026 nvd
CVE-2026-2347 (CVSS 9.8) — Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software...
CVE 15 May 2026 nvd
CVE-2026-41615 (CVSS 9.6) — Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator all...
CRA 15 May 2026 nvd
CVE-2026-8634 (CVSS 9.1) — Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allo...
CVE 15 May 2026 nvd
CVE-2026-5229 (CVSS 9.8) — The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up...
CVE 15 May 2026 kev
KEV: CVE-2026-20182 — Cisco Catalyst SD-WAN (Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability)
CVE 15 May 2026 kev
KEV: CVE-2026-42208 — BerriAI LiteLLM (BerriAI LiteLLM SQL Injection Vulnerability)
CVE 15 May 2026 kev
KEV: CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM) (Ivanti Endpoint Manager Mobile (EPMM) Improper Input Vali...
CVE 15 May 2026 kev
KEV: CVE-2026-0300 — Palo Alto Networks PAN-OS (Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability)
BREACH 15 May 2026 hibp
Breach: Abrigo (711,099 accounts) — Email addresses, Employers, Job titles
DORA 14 May 2026 cellar
CELEX:32024R1991R(05)
This corrigendum, published on 13 May 2026, corrects technical errors in the original Digital Operational Resilience Act (DORA) Delegated Regulation 2024/1991, which specifies criteria for classify...
Read analysis →