Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

zia-admin-ui

Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.

CVE-2026-22567 is a vulnerability identified in Zscaler Internet Access (ZIA) Admin UI version 6.2, categorized under CWE-20 for improper input validation. The flaw arises from insufficient validation of user-supplied input in specific administrative UI fields, which can be exploited by an authenticated administrator to invoke backend functions unexpectedly. This could lead to unauthorized disclosure of sensitive information or partial manipulation of backend processes. The vulnerability does not require user interaction but does require the attacker to have administrative privileges, which limits the attack surface to insiders or compromised admin accounts. The CVSS v3.1 score of 7.6 reflects a high severity, with a vector indicating network attack vector, low attack complexity, high privileges required, no user interaction, and a scope change. Confidentiality impact is high, indicating potential data exposure, while integrity impact is low and availability impact is none. No public exploits have been reported yet, but the vulnerability's presence in a widely used cloud security product makes it a significant concern. The lack of available patches at the time of publication necessitates immediate attention to mitigation strategies.

Detailed information about CVE-2026-22567: CWE-20 Improper Input Validation in Zscaler ZIA Admin UI affecting Zscaler ZIA Admin UI. Get real-time updates, techn

CVE-2026-22567: CWE-20 Improper Input Validation in Zscaler ZIA Admin UI - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22567: CWE-20 Improper Input Validation in Zscaler ZIA Admin UI

Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.

CVE-2026-22568 is a vulnerability identified in Zscaler's ZIA Admin UI version 6.2, classified under CWE-20 for improper input validation. The issue arises from the failure to properly neutralize special elements in user-supplied input within the administrative interface. This flaw can be exploited by an authenticated administrator, who, by submitting crafted input, might access or retrieve internal information that they are not authorized to view. The vulnerability requires high privileges (administrator-level access) but does not require any user interaction beyond authentication. The CVSS 3.1 base score is 5.5, indicating a medium severity level, with the vector showing network attack vector (AV:N), low attack complexity (AC:L), high privileges required (PR:H), no user interaction (UI:N), and a scope change (S:C) that affects confidentiality and integrity to a limited extent (C:L/I:L/A:N). Although no public exploits have been reported, the vulnerability poses a risk of unauthorized data disclosure and potential integrity violations within the ZIA Admin UI environment. The vulnerability is particularly relevant for organizations relying on Zscaler's cloud security platform for secure internet access and administrative management.

Detailed information about CVE-2026-22568: CWE-20 Improper Input Validation in Zscaler ZIA Admin UI affecting Zscaler ZIA Admin UI. Get real-time updates, techn

CVE-2026-22568: CWE-20 Improper Input Validation in Zscaler ZIA Admin UI - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22568: CWE-20 Improper Input Validation in Zscaler ZIA Admin UI


CVE-2026-22567: CWE-20 Improper Input Validation in Zscaler ZIA Admin UICVE-2026-22567 0 Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios. HighVulnerabilityUnited StatesUnited KingdomGermany+7#cve #cve-2026-22567 #cwe-20 Join the discussion	CVE Database V5	02/23/2026, 16:13:32 UTC Added: 02/23/2026, 20:50:20 UTC
CVE-2026-22568: CWE-20 Improper Input Validation in Zscaler ZIA Admin UICVE-2026-22568 0 Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions. MediumVulnerabilityUnited StatesUnited KingdomGermany+7#cve #cve-2026-22568 #cwe-20 Join the discussion	CVE Database V5	02/23/2026, 16:12:52 UTC Added: 02/23/2026, 20:50:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional