Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.

CVE-2025-25265 is a vulnerability classified under CWE-306 (Missing Authentication for Critical Function) affecting the WAGO CC100 0751-9x01 industrial controller. The issue resides in the web application used for configuring the controller, which exposes an endpoint accessible at a specific path that lacks proper authentication controls. This flaw enables a remote attacker with high privileges to read arbitrary files from the system's file structure without additional user interaction. The vulnerability has a CVSS v3.1 base score of 4.9, indicating medium severity, with the vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. This means the attack can be performed remotely over the network with low attack complexity but requires the attacker to already have high privileges on the device. The impact is primarily on confidentiality, as sensitive files could be disclosed, but the integrity and availability of the system are not directly affected. The vulnerability was published on June 16, 2025, and no patches or known exploits have been reported yet. The affected product is widely used in industrial automation for controlling processes, making this vulnerability significant for operational technology environments. The lack of authentication on critical functions exposes sensitive configuration and system files, potentially leading to information leakage that could facilitate further attacks or industrial espionage.

Detailed information about CVE-2025-25265: CWE-306 Missing Authentication for Critical Function in WAGO WAGO CC100 0751-9x01 affecting WAGO WAGO CC100 0751-9x01

CVE-2025-25265: CWE-306 Missing Authentication for Critical Function in WAGO WAGO CC100 0751-9x01 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-25265: CWE-306 Missing Authentication for Critical Function in WAGO WAGO CC100 0751-9x01

Threats Tagged 'cve-2025-25265'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-25265'

Lead Pen Test Professional