Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Airleader Master versions 6.381 and prior allow for file uploads without
 restriction to multiple webpages running maximum privileges. This could
 allow an unauthenticated user to potentially obtain remote code 
execution on the server.

CVE-2026-1358 is a critical security vulnerability classified under CWE-434 (Unrestricted Upload of File with Dangerous Type) affecting Airleader GmbH's Airleader Master software, specifically versions 6.381 and earlier. The vulnerability arises because the software allows file uploads to multiple web pages without any restrictions or validation, and these pages operate with maximum privileges on the server. This lack of validation means an unauthenticated attacker can upload arbitrary files, including malicious scripts or executables, which can then be executed remotely on the server. The vulnerability does not require any authentication or user interaction, making it highly exploitable remotely over the network. The CVSS v3.1 base score of 9.8 reflects the critical nature of this flaw, with attack vector being network-based, low attack complexity, no privileges required, and no user interaction needed. The impact covers full compromise of confidentiality, integrity, and availability of the affected system. Although no exploits have been reported in the wild yet, the ease of exploitation and severity make this a significant threat. The vulnerability affects industrial control and automation environments where Airleader Master is deployed, potentially impacting operational technology systems. No official patches or mitigations have been linked yet, emphasizing the need for immediate attention from affected organizations.

Detailed information about CVE-2026-1358: CWE-434 in Airleader GmbH Airleader Master affecting Airleader GmbH Airleader Master. Get real-time updates, technical

CVE-2026-1358: CWE-434 in Airleader GmbH Airleader Master - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1358: CWE-434 in Airleader GmbH Airleader Master

Threats Tagged 'cve-2026-1358'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1358'

Lead Pen Test Professional