Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

wekan

A vulnerability has been found in WeKan up to 8.20. Affected by this vulnerability is the function ComprehensiveBoardMigration of the file server/migrations/comprehensiveBoardMigration.js of the component Migration Operation Handler. The manipulation of the argument boardId leads to improper access controls. The attack is possible to be carried out remotely. Upgrading to version 8.21 addresses this issue. The identifier of the patch is cc35dafef57ef6e44a514a523f9a8d891e74ad8f. Upgrading the affected component is advised.

CVE-2026-1896 is a vulnerability identified in the open-source project WeKan, specifically affecting versions 8.0 through 8.20. The issue resides in the ComprehensiveBoardMigration function within the server/migrations/comprehensiveBoardMigration.js file, part of the Migration Operation Handler component. The vulnerability stems from improper access control when processing the boardId argument, which can be manipulated remotely by an attacker. This manipulation allows unauthorized access or modification of board data during migration operations. The attack vector is network-based (AV:N), requires low attack complexity (AC:L), no authentication (AT:N), and no user interaction (UI:N). However, the attacker must have limited privileges (PR:L) on the system. The vulnerability impacts confidentiality, integrity, and availability to a low degree (VC:L, VI:L, VA:L). The scope remains unchanged (S:U), and no security requirements are bypassed (SI:N, SA:N). The vulnerability was assigned a CVSS v4.0 base score of 5.3, categorized as medium severity. The issue was patched in WeKan version 8.21, with the patch identified by commit cc35dafef57ef6e44a514a523f9a8d891e74ad8f. No known exploits have been reported in the wild to date. The vulnerability highlights the importance of proper access control validation in migration operations within collaborative software platforms.

Detailed information about CVE-2026-1896: Improper Access Controls in WeKan affecting null WeKan. Get real-time updates, technical details, and mitigation strat

CVE-2026-1896: Improper Access Controls in WeKan - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1896: Improper Access Controls in WeKan

Threats Tagged 'cve-2026-1896'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1896'

Lead Pen Test Professional