Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Gutena Forms  WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options (such as users_can_register).

CVE-2026-1753 is a vulnerability identified in the Gutena Forms WordPress plugin prior to version 1.6.1. The root cause is the lack of proper validation on the options that contributors and above roles can update within the plugin. Specifically, the plugin fails to restrict which boolean and array options can be modified, allowing an attacker with contributor-level access or higher to update arbitrary options such as users_can_register. This option controls whether new users can register on the WordPress site, and unauthorized modification could lead to unintended user registrations or privilege escalations. The vulnerability is classified under CWE-639, which refers to authorization bypass through user-controlled keys, indicating that the plugin trusts user input to determine which options to update without adequate authorization checks. Although no exploits have been reported in the wild, the vulnerability allows an attacker with relatively low privileges to manipulate site configuration, potentially leading to broader compromise. The vulnerability affects all versions before 1.6.1, and no CVSS score has been assigned yet. The vulnerability was published in March 2026, with the initial reservation in February 2026. The absence of a patch link suggests that a fix may be forthcoming or recently released. This vulnerability highlights the importance of strict validation and authorization checks on user-controlled inputs, especially in plugins that manage site configuration.

Detailed information about CVE-2026-1753: CWE-639 Authorization Bypass Through User-Controlled Key in Gutena Forms affecting null Gutena Forms. Get real-time up

CVE-2026-1753: CWE-639 Authorization Bypass Through User-Controlled Key in Gutena Forms - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1753: CWE-639 Authorization Bypass Through User-Controlled Key in Gutena Forms

Threats Tagged 'cve-2026-1753'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1753'

Lead Pen Test Professional