Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ec-cube

EC-CUBE provided by EC-CUBE CO.,LTD.contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.

CVE-2026-30777 is an authentication bypass vulnerability affecting EC-CUBE 4.1 series, a popular Japanese e-commerce platform developed by EC-CUBE CO.,LTD. The vulnerability specifically targets the multi-factor authentication (MFA) mechanism protecting the administrative interface. An attacker who has already obtained valid administrator credentials (username and password) can exploit an alternate path or channel within the authentication process to bypass the second factor of authentication. This flaw effectively nullifies the protection offered by MFA, allowing unauthorized access to the administrative page without requiring user interaction. The vulnerability affects all versions prior to 4.1.2-p5, which presumably includes a patch to fix this issue. The CVSS v3.0 score is 4.9 (medium severity), reflecting that the attack vector is network-based, requires high privileges (valid admin credentials), no user interaction, and impacts integrity but not confidentiality or availability. No known exploits are currently reported in the wild, but the risk remains significant due to the potential for privilege escalation and administrative control takeover. The vulnerability underscores a design or implementation flaw in the MFA enforcement logic, where an alternate authentication path bypasses the second factor check. This could be due to legacy code paths, API endpoints, or session management issues that do not enforce MFA consistently. Organizations relying on EC-CUBE 4.1 series for their e-commerce operations must urgently upgrade to version 4.1.2-p5 or later to remediate this issue and review their credential security policies to prevent credential compromise. Additional monitoring of administrative login attempts and anomaly detection is recommended to detect potential exploitation attempts.

Detailed information about CVE-2026-30777: Authentication Bypass Using an Alternate Path or Channel in EC-CUBE CO.,LTD. EC-CUBE 4.1 series affecting EC-CUBE CO.

CVE-2026-30777: Authentication Bypass Using an Alternate Path or Channel in EC-CUBE CO.,LTD. EC-CUBE 4.1 series - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-30777: Authentication Bypass Using an Alternate Path or Channel in EC-CUBE CO.,LTD. EC-CUBE 4.1 series

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional