Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

checkmk

Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information

CVE-2025-58121 is a vulnerability identified in Checkmk, a widely used IT infrastructure monitoring tool developed by Checkmk GmbH. The issue stems from improper handling of insufficient permissions (CWE-280) on multiple REST API endpoints in versions 2.2.0, 2.3.0, and 2.4.0 before patch 2.4.0p16. Specifically, the software fails to adequately validate user privileges when processing API requests, allowing low-privileged users to execute unauthorized actions or retrieve sensitive data. The vulnerability is remotely exploitable over the network without requiring authentication or user interaction, which increases the attack surface. The CVSS 4.0 vector indicates low attack complexity and no need for authentication, but the impact on confidentiality, integrity, and availability is limited to low levels individually, resulting in an overall medium severity score of 5.3. While no public exploits are known, the flaw could be leveraged by malicious insiders or attackers who have gained limited access to the network to escalate privileges or gather sensitive operational data. The affected REST API endpoints likely expose monitoring configurations, system status, or other operational details that could aid further attacks or cause disruption if manipulated. The vulnerability was reserved in August 2025 and published in November 2025, indicating recent discovery and disclosure. No official patches were linked at the time of reporting, but the vendor is expected to release updates to address the issue. Organizations relying on Checkmk for critical monitoring functions should be aware of this risk and prepare to apply fixes promptly.

Detailed information about CVE-2025-58121: CWE-280: Improper Handling of Insufficient Permissions or Privileges in Checkmk GmbH Checkmk affecting Checkmk GmbH C

CVE-2025-58121: CWE-280: Improper Handling of Insufficient Permissions or Privileges in Checkmk GmbH Checkmk - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-58121: CWE-280: Improper Handling of Insufficient Permissions or Privileges in Checkmk GmbH Checkmk

Threats Tagged 'cve-2025-58121'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-58121'

Lead Pen Test Professional