Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

psi-probe

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-3270 is a server-side request forgery vulnerability affecting PSI Probe, an open-source monitoring tool for Apache Tomcat servers, specifically versions 5.0 through 5.3.0. The vulnerability resides in the Whois component's lookup function, located in psi-probe-core/src/main/java/psiprobe/tools/Whois.java. SSRF occurs when the application accepts user-controlled input to perform network requests without proper validation or sanitization, allowing attackers to coerce the server into making arbitrary HTTP requests. This can lead to unauthorized internal network scanning, access to sensitive internal resources, or interaction with external malicious endpoints. The vulnerability can be triggered remotely without user interaction but requires low-level privileges on the system, which may be achievable through other means or misconfigurations. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required (PR:L means low privileges), no user interaction, and low impact on confidentiality, integrity, and availability. The vendor has not responded to the vulnerability disclosure, and no patches have been released, increasing the risk for organizations relying on PSI Probe. While no active exploitation has been reported, the public disclosure of the exploit details raises the likelihood of future attacks. PSI Probe is widely used in environments monitoring Tomcat servers, making this vulnerability relevant for many enterprise and cloud deployments.

Detailed information about CVE-2026-3270: Server-Side Request Forgery in psi-probe PSI Probe affecting psi-probe PSI Probe. Get real-time updates, technical det

CVE-2026-3270: Server-Side Request Forgery in psi-probe PSI Probe - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3270: Server-Side Request Forgery in psi-probe PSI Probe

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-3269 is a denial of service vulnerability identified in the PSI Probe monitoring tool, specifically affecting versions 5.0 through 5.3.0. The vulnerability resides in the handleRequestInternal method within the ExpireSessionsController.java file, part of the session handler component. PSI Probe is widely used to monitor Apache Tomcat servers, providing insights into server health and session management. The flaw allows a remote attacker to manipulate requests to this function, causing the application to enter a denial of service state, likely by exhausting resources or triggering unhandled exceptions. The attack vector requires no user interaction and can be executed remotely with low privileges, making it relatively easy to exploit. The CVSS 4.0 base score is 5.3, reflecting medium severity due to the lack of confidentiality, integrity, or availability impact beyond service disruption, and the requirement for some privileges. The vendor was notified early but has not issued a patch or response, and while no active exploitation in the wild is reported, a public exploit exists, increasing the urgency for mitigation. This vulnerability could disrupt monitoring operations, impacting administrators' ability to manage Tomcat server sessions effectively.

Detailed information about CVE-2026-3269: Denial of Service in psi-probe PSI Probe affecting psi-probe PSI Probe. Get real-time updates, technical details, and 

CVE-2026-3269: Denial of Service in psi-probe PSI Probe - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3269: Denial of Service in psi-probe PSI Probe


CVE-2026-3270: Server-Side Request Forgery in psi-probe PSI ProbeCVE-2026-3270 0 A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-3270 Join the discussion	CVE Database V5	02/26/2026, 23:32:09 UTC Added: 02/26/2026, 23:56:11 UTC
CVE-2026-3269: Denial of Service in psi-probe PSI ProbeCVE-2026-3269 0 A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-3269 Join the discussion	CVE Database V5	02/26/2026, 23:32:07 UTC Added: 02/26/2026, 23:56:11 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional