Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an iframe.

CVE-2025-52196 is a Server-Side Request Forgery (SSRF) vulnerability identified in Ctera Portal version 8.1.x (notably 8.1.1417.24). SSRF vulnerabilities occur when an attacker can manipulate a server to make HTTP requests to arbitrary destinations, potentially accessing internal or protected resources that are not directly reachable from the attacker's network. In this case, the vulnerability is triggered by an attacker submitting a crafted HTML file containing an iframe element, which causes the vulnerable Ctera Portal server to issue HTTP requests to attacker-controlled or internal URLs. The vulnerability does not require any authentication or user interaction, making it remotely exploitable over the network. The CVSS v3.1 base score of 7.5 reflects a high severity due to the network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact primarily affects confidentiality, as attackers can leverage SSRF to access sensitive internal services, metadata endpoints, or other protected resources. Integrity and availability impacts are not indicated. No known public exploits have been reported yet, and no official patches or updates have been linked at the time of publication. The vulnerability is classified under CWE-918 (Server-Side Request Forgery). Given the nature of Ctera Portal as a cloud storage and file sharing platform, exploitation could lead to unauthorized data exposure or lateral movement within enterprise networks.

Detailed information about CVE-2025-52196: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-52196: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52196: n/a

Threats Tagged 'cve-2025-52196'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52196'

Lead Pen Test Professional