Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Kaspersky Security Blog

Check Point Research

AlienVault OTX General

CVE Database V5

SANS ISC Handlers Diary

SecurityWeek

Threatpost

The Hacker News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit NetSec

Reddit InfoSec News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CVE-2026-2083 is a medium severity SQL injection vulnerability affecting version 1. 0 of the code-projects Social Networking Site, specifically in the /delete_post. php file. The flaw allows remote attackers to manipulate the ID parameter to execute arbitrary SQL commands without authentication or user interaction. This can lead to partial compromise of confidentiality, integrity, and availability of the backend database. Although no known exploits are currently observed in the wild, a public exploit has been released, increasing the risk of attacks. European organizations using this software, especially those with public-facing social networking platforms, are at risk of data breaches and service disruption. Mitigation requires immediate input validation and parameterized queries, along with monitoring and restricting access to vulnerable endpoints. Countries with higher adoption of this platform or significant social networking service providers are more likely to be targeted. Given the ease of exploitation and potential impact, organizations should prioritize patching or applying workarounds promptly.

CVE-2026-2083 identifies a SQL injection vulnerability in the code-projects Social Networking Site version 1.0, specifically within the /delete_post.php script. The vulnerability arises from improper sanitization of the 'ID' parameter, which an attacker can manipulate remotely to inject malicious SQL statements. This injection can allow unauthorized reading, modification, or deletion of database records, potentially exposing sensitive user data or corrupting application data. The attack vector requires no authentication or user interaction, making it highly accessible to remote attackers. The CVSS v4.0 score of 6.9 reflects a medium severity, considering the low complexity and no privileges required, but limited scope and impact. Although no active exploitation in the wild has been reported, the public availability of an exploit increases the risk of imminent attacks. The vulnerability affects only version 1.0 of the product, and no official patches have been published yet. The lack of authentication and user interaction requirements combined with the direct impact on database integrity and confidentiality make this a significant threat to affected deployments.

Detailed information about CVE-2026-2083: SQL Injection in code-projects Social Networking Site affecting code-projects Social Networking Site. Get real-time up

CVE-2026-2083: SQL Injection in code-projects Social Networking Site - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2083: SQL Injection in code-projects Social Networking Site

CVE-2026-2082 is a medium-severity OS command injection vulnerability affecting the D-Link DIR-823X router, version 250416. The flaw exists in the /goform/set_mac_clone endpoint, where manipulation of the 'mac' argument allows remote attackers to execute arbitrary OS commands. Exploitation does not require user interaction but does require high privileges, limiting attack vectors. Although no public exploits are currently known in the wild, proof-of-concept code is available. This vulnerability could allow attackers to compromise router integrity and availability, potentially leading to network disruption or further internal network compromise. European organizations using this router model should prioritize patching or mitigating this issue. Countries with higher D-Link market penetration and critical infrastructure reliance on such devices are at greater risk. Mitigation includes restricting remote management access, applying firmware updates when available, and monitoring network traffic for suspicious activity.

CVE-2026-2082 identifies an OS command injection vulnerability in the D-Link DIR-823X router, specifically version 250416. The vulnerability resides in an unspecified function handling the /goform/set_mac_clone endpoint, where the 'mac' parameter is improperly sanitized, allowing attackers to inject arbitrary operating system commands. This injection flaw can be exploited remotely without user interaction, but requires high privileges, indicating that an attacker must already have elevated access to the device or network to exploit it. The vulnerability has a CVSS 4.0 base score of 5.1, reflecting medium severity due to limited scope and required privileges. Successful exploitation could lead to unauthorized command execution on the router, compromising device integrity and potentially affecting network availability. Although no known exploits are reported in the wild, publicly available proof-of-concept exploits increase the risk of future attacks. The vulnerability highlights the importance of secure input validation in router firmware, especially for endpoints exposed to remote management. Given the critical role of routers in network infrastructure, exploitation could facilitate lateral movement, data interception, or denial of service within affected networks.

Detailed information about CVE-2026-2082: OS Command Injection in D-Link DIR-823X affecting D-Link DIR-823X. Get real-time updates, technical details, and mitig

CVE-2026-2082: OS Command Injection in D-Link DIR-823X - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2082: OS Command Injection in D-Link DIR-823X

CVE-2026-2080 is a high-severity command injection vulnerability in UTT HiPER 810 version 1. 7. 4-141218, specifically in the setSysAdm function within /goform/formUser. The vulnerability arises from improper sanitization of the passwd1 argument, allowing remote attackers to execute arbitrary system commands without user interaction or authentication. Although the vendor has not responded to disclosure, public exploit code exists, increasing the risk of exploitation. The vulnerability impacts confidentiality, integrity, and availability of affected systems. European organizations using this product, especially in critical infrastructure or telecommunications, face significant risks. Mitigation requires immediate network-level restrictions, monitoring for suspicious activity, and applying vendor patches once available. Countries with higher UTT HiPER 810 deployment and strategic telecom infrastructure are most at risk. Due to the ease of remote exploitation and high impact, this vulnerability demands urgent attention from defenders.

CVE-2026-2080 identifies a command injection vulnerability in the UTT HiPER 810 device, version 1.7.4-141218. The flaw exists in the setSysAdm function located in the /goform/formUser endpoint, where the passwd1 parameter is improperly handled, allowing an attacker to inject arbitrary commands. This vulnerability can be exploited remotely without requiring user interaction or prior authentication, which significantly increases the attack surface. The CVSS 4.0 score of 8.6 (high severity) reflects the vulnerability's potential to compromise confidentiality, integrity, and availability of the device. The vulnerability could allow attackers to execute system-level commands, potentially leading to full device compromise, data exfiltration, or disruption of services. Although no patches have been released and the vendor has not responded to the disclosure, public exploit code is available, raising the likelihood of exploitation. The vulnerability affects a specific firmware version, indicating that organizations running this version are at risk. The lack of authentication and user interaction requirements makes this vulnerability particularly dangerous in exposed network environments. The device is often used in telecommunications or network infrastructure contexts, which increases the criticality of this vulnerability. Defenders must prioritize detection and containment until a patch is available.

Detailed information about CVE-2026-2080: Command Injection in UTT HiPER 810 affecting UTT HiPER 810. Get real-time updates, technical details, and mitigation s

CVE-2026-2080: Command Injection in UTT HiPER 810 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2080: Command Injection in UTT HiPER 810

CVE-2026-2079 is a medium-severity improper authorization vulnerability in the yeqifu warehouse product affecting the Menu Management component. It impacts the addMenu, updateMenu, and deleteMenu functions in the MenuController. java file, allowing remote attackers with limited privileges to perform unauthorized actions without user interaction. The product uses a rolling release model, so no specific version updates are available yet, and the vendor has not responded to the issue report. The vulnerability has a CVSS 4. 0 score of 5. 3, indicating moderate risk, with potential impacts on confidentiality, integrity, and availability due to improper authorization. No known exploits are currently active in the wild. European organizations using yeqifu warehouse should prioritize access control reviews and monitor for updates. Countries with higher adoption of this product or strategic warehouse management systems are more likely to be affected.

CVE-2026-2079 identifies an improper authorization vulnerability in the yeqifu warehouse software, specifically within the Menu Management component's addMenu, updateMenu, and deleteMenu functions located in the MenuController.java source file. This flaw allows an attacker with limited privileges to remotely manipulate menu configurations without proper authorization checks, potentially escalating privileges or altering critical system settings. The vulnerability arises from insufficient enforcement of access control mechanisms in these functions, permitting unauthorized operations that can compromise system integrity and availability. The product's rolling release development model complicates patch management, as no fixed version numbers or official updates have been released to address this issue. The vulnerability has been publicly disclosed with a CVSS 4.0 base score of 5.3, reflecting medium severity due to its network attack vector, low complexity, no required authentication, and no user interaction. Although no active exploits have been reported in the wild, the availability of a public exploit increases the risk of exploitation. The vendor has not yet responded or provided remediation guidance, emphasizing the need for proactive mitigation by users. This vulnerability could be leveraged to disrupt warehouse management operations, alter menu configurations, or gain unauthorized access to system functions, impacting business continuity and data integrity.

Detailed information about CVE-2026-2079: Improper Authorization in yeqifu warehouse affecting yeqifu warehouse. Get real-time updates, technical details, and m

CVE-2026-2079: Improper Authorization in yeqifu warehouse - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2079: Improper Authorization in yeqifu warehouse

CVE-2025-15476 is a medium severity vulnerability in the WordPress plugin The Bucketlister (up to version 0. 1. 5) caused by missing authorization checks in the bucketlister_do_admin_ajax() function. Authenticated users with Subscriber-level access or higher can exploit this flaw to add, delete, or modify arbitrary bucket list items without proper permissions. The vulnerability does not impact confidentiality or availability but allows integrity compromise of bucket list data. Exploitation requires authentication but no user interaction beyond that. There are no known exploits in the wild and no patches currently available. European organizations using this plugin on WordPress sites should prioritize restricting access and monitoring for unauthorized changes. Countries with high WordPress adoption and active web development communities are more likely to be affected. Mitigation involves applying strict role-based access controls and monitoring plugin updates for patches.

CVE-2025-15476 is a vulnerability identified in the WordPress plugin The Bucketlister, developed by simonfairbairn, affecting all versions up to and including 0.1.5. The root cause is a missing authorization check (CWE-862) in the bucketlister_do_admin_ajax() function, which handles AJAX requests for administrative actions within the plugin. This flaw allows any authenticated user with at least Subscriber-level privileges to perform unauthorized modifications to bucket list items, including adding, deleting, or altering entries. The vulnerability arises because the function does not verify whether the user has sufficient capabilities to perform these actions, effectively bypassing intended access controls. The CVSS v3.1 score is 4.3 (medium severity), reflecting that the attack vector is network-based, requires low complexity, and privileges at the level of a logged-in user, but does not affect confidentiality or availability. No user interaction is required beyond authentication. Although no known exploits have been reported in the wild, the vulnerability poses a risk to the integrity of data managed by the plugin. Since The Bucketlister is a WordPress plugin, the vulnerability impacts websites using this plugin, potentially allowing attackers to manipulate content or data presented to end users or administrators. The lack of an available patch at the time of publication means that mitigation relies on access control and monitoring.

Detailed information about CVE-2025-15476: CWE-862 Missing Authorization in simonfairbairn The Bucketlister affecting simonfairbairn The Bucketlister. Get real-

Geographic Threat Map

Global Threat Distribution

Threat Levels

Recent Threats

CVE-2026-2083: SQL Injection in code-projects Social Network...

CVE-2026-2082: OS Command Injection in D-Link DIR-823X

CVE-2026-2080: Command Injection in UTT HiPER 810

CVE-2026-2079: Improper Authorization in yeqifu warehouse

CVE-2025-15476: CWE-862 Missing Authorization in simonfairba...

Country Risk Levels

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility