Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

portainer

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before applying access controls, allowing crafted requests to be interpreted differently by the proxy and the authorization layer. Successful exploitation grants the attacker root-level access to the underlying Docker host.

This vulnerability in Portainer CE involves improper authentication due to the proxy endpoint not normalizing request paths before enforcing access controls. As a result, attackers with low privileges can craft requests that are interpreted differently by the proxy and the authorization layer, bypassing authorization checks. This leads to an authentication bypass (CWE-287) that allows escalation to root-level access on the Docker host. The issue affects Portainer CE versions up to 2.44.0.

Detailed information about CVE-2026-72533: CWE-287: Improper Authentication in Portainer Portainer CE affecting Portainer Portainer CE. Get real-time updates, t

CVE-2026-72533: CWE-287: Improper Authentication in Portainer Portainer CE - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-72533: CWE-287: Improper Authentication in Portainer Portainer CE

Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.

CVE-2024-33662 identifies a cryptographic vulnerability in Portainer, a popular container management platform. The flaw arises from improper use of an encryption algorithm within the AesEncrypt function, classified under CWE-326, which denotes the use of a broken or risky cryptographic primitive. This improper implementation can lead to weak encryption, making sensitive data vulnerable to unauthorized disclosure or tampering. The vulnerability affects all versions of Portainer prior to 2.20.2, though exact affected versions are unspecified. The CVSS 3.1 base score of 7.5 reflects a high severity, with attack vector being network-based (AV:N), requiring high attack complexity (AC:H), low privileges (PR:L), and no user interaction (UI:N). The scope is unchanged (S:U), but the impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H). This means an attacker can remotely exploit this flaw to gain unauthorized access to sensitive information, alter data, or disrupt service availability. No public exploits or active exploitation have been reported yet, but the vulnerability's nature and impact make it a significant risk. Portainer is widely used in containerized environments for managing Docker and Kubernetes, making this vulnerability relevant to organizations relying on container orchestration and DevOps pipelines. The lack of a patch link suggests that users should monitor official Portainer channels for updates or apply available security advisories promptly.

Detailed information about CVE-2024-33662: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33662: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33662: n/a

Portainer before 2.20.0 allows redirects when the target is not index.yaml.

CVE-2024-33661 is an open redirect vulnerability affecting Portainer, a popular container management platform, in versions prior to 2.20.0. The vulnerability arises because the application improperly validates redirect targets, allowing redirection to arbitrary URLs instead of restricting redirects to the legitimate index.yaml resource. This flaw can be exploited by attackers who craft malicious URLs that appear to originate from a trusted Portainer domain but redirect victims to attacker-controlled sites. Such open redirects can be leveraged in phishing campaigns, social engineering, or to bypass security controls like web filters. The vulnerability requires no authentication or user interaction, making it remotely exploitable by any attacker with network access to the Portainer instance. The CVSS v3.1 score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) indicates a critical severity due to the high impact on confidentiality and integrity without requiring privileges or user interaction. Although no active exploits have been reported, the widespread use of Portainer in containerized environments increases the risk of exploitation. The vulnerability is categorized under CWE-601, which covers open redirect issues that can facilitate malicious redirection attacks. No official patch links were provided, but upgrading to Portainer 2.20.0 or later is the recommended remediation.

Detailed information about CVE-2024-33661: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2026-72533: CWE-287: Improper Authentication in Portainer Portainer CECVE-2026-72533 0 An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before applying access controls, allowing crafted requests to be interpreted differently by the proxy and the authorization layer. Successful exploitation grants the attacker root-level access to the underlying Docker host. HighVulnerability#cve #cve-2026-72533 #cwe-287 Join the discussion	CVE Database V5	08/11/2026, 11:06:33 UTC Added: 08/11/2026, 11:26:58 UTC
CVE-2024-33662: n/aCVE-2024-33662 0 Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33662 Join the discussion	CVE Database V5	10/02/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:19 UTC
CVE-2024-33661: n/aCVE-2024-33661 0 Portainer before 2.20.0 allows redirects when the target is not index.yaml. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33661 Join the discussion	CVE Database V5	04/25/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:19 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional