Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes application (the default for all users XWiki) can obtain programming right/perform remote code execution by editing the application. This vulnerability has been fixed in XWiki 17.0.0, 16.4.7, and 16.10.3.

CVE-2025-49586 is a high-severity vulnerability affecting the XWiki platform, an open-source wiki software widely used for collaborative documentation and knowledge management. The vulnerability is classified under CWE-863, which pertains to incorrect authorization. Specifically, any user with edit rights on at least one 'App Within Minutes' application—a default permission granted to all XWiki users—can escalate their privileges to obtain programming rights. This privilege escalation enables remote code execution (RCE) by modifying the application code. The flaw arises because the platform fails to properly enforce authorization checks when users attempt to edit these applications, allowing unauthorized elevation of privileges without requiring additional authentication or user interaction. The vulnerability affects multiple versions of XWiki, including all releases from version 7.2-milestone-2 up to but not including 16.4.7, versions from 16.5.0-rc-1 up to but not including 16.10.3, and versions from 17.0.0-rc-1 up to but not including 17.0.0. The issue has been addressed in XWiki versions 16.4.7, 16.10.3, and 17.0.0. The CVSS 4.0 base score is 8.7, indicating a high severity level, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:L, meaning low privileges are sufficient), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (all rated high). No known exploits are currently reported in the wild, but the ease of exploitation and potential impact make this a critical issue for affected deployments.

Detailed information about CVE-2025-49586: CWE-863: Incorrect Authorization in xwiki xwiki-platform affecting xwiki xwiki-platform. Get real-time updates, techn

CVE-2025-49586: CWE-863: Incorrect Authorization in xwiki xwiki-platform - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49586: CWE-863: Incorrect Authorization in xwiki xwiki-platform

Threats Tagged 'cve-2025-49586'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49586'

Lead Pen Test Professional