Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.  Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure.  Successful exploitation may allow remote code execution or denial-of-service.

CVE-2026-1668 is a vulnerability identified in the web management interface of TP-Link Systems Inc.'s Omada SG2008P switches running firmware version 3.2x. The root cause is improper input validation (CWE-20), where the device fails to adequately verify certain external inputs submitted via crafted HTTP requests to the web interface. This flaw can lead to out-of-bound memory access, which under specific conditions may cause memory corruption. Such corruption can destabilize the device's services or lead to unintended command execution. Notably, exploitation does not require authentication or user interaction but does require network access to the affected interface, which is typically the management network segment. The vulnerability can result in remote code execution (RCE), allowing attackers to execute arbitrary commands on the device, or denial-of-service (DoS), rendering the switch inoperable. The CVSS v4.0 base score is 7.7 (high severity), reflecting the significant impact on confidentiality, integrity, and availability, combined with the complexity of attack being high due to required network access and no privileges needed. No public exploits have been reported yet, and no patches are currently linked, indicating that organizations must monitor vendor advisories closely. The vulnerability affects the core network infrastructure component, potentially impacting network stability and security posture.

Detailed information about CVE-2026-1668: CWE-20 Improper Input Validation in TP-Link Systems Inc. SG2008P 3.2x affecting TP-Link Systems Inc. SG2008P 3.2x. Get

CVE-2026-1668: CWE-20 Improper Input Validation in TP-Link Systems Inc. SG2008P 3.2x - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1668: CWE-20 Improper Input Validation in TP-Link Systems Inc. SG2008P 3.2x

Threats Tagged 'cve-2026-1668'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1668'

Lead Pen Test Professional