Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 

could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.

CVE-2025-36355 is a vulnerability classified under CWE-829, which involves the inclusion of functionality from an untrusted control sphere. Specifically, this affects IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0. The vulnerability allows a locally authenticated user to execute malicious scripts that originate from outside the appliance's trusted control environment. This means that the appliance improperly trusts and executes code or scripts that should be outside its security boundary, leading to potential unauthorized actions. The vulnerability does not require elevated privileges (PR:N) or user interaction (UI:N), but does require local authentication (AV:L). The CVSS v3.1 base score is 8.5, indicating high severity with significant confidentiality impact (C:H), limited integrity impact (I:L), and limited availability impact (A:L). The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. Although no known exploits are currently reported, the nature of the vulnerability suggests that an attacker with local access could leverage it to execute arbitrary scripts, potentially leading to data exposure or partial system compromise. The vulnerability affects critical identity and access management infrastructure, which is central to enterprise security postures. IBM has not yet published patches at the time of this report, so mitigation relies on access controls and monitoring.

Detailed information about CVE-2025-36355: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in IBM Security Verify Access Appliance affecting IB

CVE-2025-36355: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in IBM Security Verify Access Appliance - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36355: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in IBM Security Verify Access Appliance

Threats Tagged 'cve-2025-36355'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-36355'

Lead Pen Test Professional