Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

viafirma-documents

Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the generation and signing of documents.

CVE-2025-41078 is an authorization bypass vulnerability classified under CWE-863, affecting Viafirma Documents version 3.7.129. The vulnerability arises from weaknesses in the application's authorization mechanisms, allowing an authenticated user with limited or no privileges to perform unauthorized actions. Specifically, the flaw permits such users to list and access data belonging to other users, manipulate user accounts by creating, modifying, or deleting them, and escalate privileges by impersonating other users during document generation and signing processes. This impersonation can lead to unauthorized signing of documents, undermining the integrity and non-repudiation guarantees of the system. The vulnerability does not require user interaction and can be exploited remotely over the network (AV:N), with low attack complexity (AC:L), and no need for elevated privileges initially (PR:L). The impact on confidentiality and integrity is high, as sensitive user data and document authenticity can be compromised. Availability impact is low, but the overall security posture is severely affected. No patches were linked at the time of publication, and no known exploits have been reported in the wild. The vulnerability was assigned by INCIBE and published in early 2026, indicating recent discovery and disclosure. Viafirma Documents is widely used in Europe for digital signature and document management, making this vulnerability particularly relevant for organizations relying on secure document workflows.

Detailed information about CVE-2025-41078: CWE-863 Incorrect Authorization in Viafirma Viafirma Documents affecting Viafirma Viafirma Documents. Get real-time u

CVE-2025-41078: CWE-863 Incorrect Authorization in Viafirma Viafirma Documents - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41078: CWE-863 Incorrect Authorization in Viafirma Viafirma Documents

Threats Tagged 'cve-2025-41078'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-41078'

Lead Pen Test Professional