Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in

CVE-2025-66269 is a vulnerability classified under CWE-428 (Unquoted Search Path or Element) found in MegaTec Taiwan's UPSilon 2000 V6.0.5 software. The vulnerability affects two services, RupsMon and USBMate, which run with SYSTEM privileges on Windows systems. These services have unquoted service paths, meaning the executable paths contain spaces but are not enclosed in quotation marks. This misconfiguration allows a local attacker who has write permissions to directories higher in the path hierarchy to place a malicious executable that could be executed with SYSTEM privileges when the service starts or restarts. This form of path interception can lead to privilege escalation from a lower privileged user to SYSTEM, compromising the entire system's confidentiality, integrity, and availability. The CVSS 4.0 base score is 7.1 (high), reflecting the ease of exploitation given local access and the significant impact of SYSTEM-level compromise. The attack vector is local (AV:L), with low attack complexity (AC:L), requiring privileges (PR:L) and partial user interaction (AT:P) is not needed. The vulnerability has not been reported exploited in the wild yet, but the risk is substantial due to the critical nature of the affected services managing UPS hardware. No patches are currently linked, so mitigation requires manual intervention or vendor updates. The vulnerability is particularly relevant to environments where UPSilon 2000 is deployed for uninterruptible power supply management, often critical infrastructure in industrial, healthcare, and data center environments.

Detailed information about CVE-2025-66269: CWE-428 Unquoted Search Path or Element in MegaTec Taiwan UPSilon2000V6.0 affecting MegaTec Taiwan UPSilon2000V6.0. G

CVE-2025-66269: CWE-428 Unquoted Search Path or Element in MegaTec Taiwan UPSilon2000V6.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66269: CWE-428 Unquoted Search Path or Element in MegaTec Taiwan UPSilon2000V6.0

Threats Tagged 'cve-2025-66269'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-66269'

Lead Pen Test Professional