Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A path traversal vulnerability in NETGEAR WiFi range extenders allows
 an attacker with LAN authentication to access the router's IP and 
review the contents of the dynamically generated webproc file, which 
records the username and password submitted to the router GUI.

CVE-2026-0408 is a vulnerability identified in the NETGEAR EX5000 WiFi range extender, classified under CWE-287 for improper authentication. The issue arises from a path traversal vulnerability that allows an attacker who has already authenticated on the local area network (LAN) to access sensitive internal resources. Specifically, the attacker can navigate to the router's internal IP address and retrieve the contents of a dynamically generated webproc file. This file records usernames and passwords submitted through the router's graphical user interface (GUI), effectively exposing sensitive authentication credentials. The vulnerability requires the attacker to have LAN-level authentication, meaning remote exploitation without credentials is not feasible. The CVSS 4.0 vector indicates the attack vector is adjacent network (AV:A), low attack complexity (AC:L), no attack prerequisites (AT:N), and privileges required are low (PR:L). The vulnerability impacts confidentiality, integrity, and availability to a high degree (VC:H, VI:H, VA:H). There is no requirement for user interaction (UI:N), and the exploitability is uncertain (E:U). No patches or known exploits have been reported at the time of publication. The vulnerability was reserved in December 2025 and published in January 2026. This flaw could allow attackers to harvest credentials, potentially leading to further compromise of the network or devices connected to the extender.

Detailed information about CVE-2026-0408: CWE-287 Improper Authentication in NETGEAR EX5000 affecting NETGEAR EX5000. Get real-time updates, technical details, 

CVE-2026-0408: CWE-287 Improper Authentication in NETGEAR EX5000 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0408: CWE-287 Improper Authentication in NETGEAR EX5000

Threats Tagged 'cve-2026-0408'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0408'

Lead Pen Test Professional