Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.

CVE-2025-27129 is an authentication bypass vulnerability classified under CWE-288 affecting the Tenda AC6 V5.0 router firmware version V02.03.01.110. The vulnerability resides in the HTTP authentication functionality, where an attacker can craft specific HTTP requests that circumvent the authentication process entirely. This bypass does not require any prior authentication, privileges, or user interaction, making it remotely exploitable over the network. Once authentication is bypassed, the attacker can execute arbitrary code on the router, gaining full control over the device. This can lead to unauthorized configuration changes, interception or redirection of network traffic, installation of persistent malware, or use of the device as a pivot point for further attacks within the network. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No official patches or firmware updates have been published at the time of disclosure, and no known exploits have been observed in the wild. The vulnerability was reserved in March 2025 and published in August 2025 by Talos. Given the widespread use of Tenda AC6 routers in consumer and small business environments, this vulnerability poses a significant risk if exploited.

Detailed information about CVE-2025-27129: CWE-288: Authentication Bypass Using an Alternate Path or Channel in Tenda AC6 V5.0 affecting Tenda AC6 V5.0. Get rea

CVE-2025-27129: CWE-288: Authentication Bypass Using an Alternate Path or Channel in Tenda AC6 V5.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-27129: CWE-288: Authentication Bypass Using an Alternate Path or Channel in Tenda AC6 V5.0

Threats Tagged 'cve-2025-27129'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-27129'

Lead Pen Test Professional