Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cloud_pak_for_business_automation

IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

IBM Cloud Pak for Business Automation versions 24.0.0 through 26.0.0, including certain interim fixes, are affected by an XPath injection vulnerability (CWE-643). This vulnerability allows an authenticated attacker to manipulate XPath queries improperly neutralized within the application, potentially leading to unauthorized disclosure of sensitive data or revealing XML document structure. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact without integrity or availability impact.

Detailed information about CVE-2026-11864: CWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection') in IBM Cloud Pak for Business Au

CVE-2026-11864: CWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection') in IBM Cloud Pak for Business Automation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-11864: CWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection') in IBM Cloud Pak for Business Automation

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

CVE-2026-12751 is an HTML injection vulnerability in IBM Cloud Pak for Business Automation that allows remote attackers to inject malicious HTML code. When a victim views the injected content, the code executes in their browser under the security context of the affected site. This improper neutralization of script-related HTML tags corresponds to CWE-80. The vulnerability affects specific versions: 24.0.0, 24.0.1, 25.0.0, and 26.0.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires low privileges and user interaction, with a scope change and impacts on confidentiality and integrity but not availability.

Detailed information about CVE-2026-12751: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in IBM Cloud Pak for Business Au

CVE-2026-12751: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in IBM Cloud Pak for Business Automation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-12751: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in IBM Cloud Pak for Business Automation


CVE-2026-11864: CWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection') in IBM Cloud Pak for Business AutomationCVE-2026-11864 0 IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document. MediumVulnerability#cve #cve-2026-11864 #cwe-643 Join the discussion	CVE Database V5	09/15/2026, 17:30:12 UTC Added: 09/15/2026, 17:48:27 UTC
CVE-2026-12751: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in IBM Cloud Pak for Business AutomationCVE-2026-12751 0 IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. MediumVulnerability#cve #cve-2026-12751 #cwe-80 Join the discussion	CVE Database V5	09/15/2026, 17:03:34 UTC Added: 09/15/2026, 17:32:31 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional