Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

wekan

A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attachmentMigration.js of the component Attachment Migration. The manipulation leads to improper access controls. The attack may be initiated remotely. Upgrading to version 8.21 is sufficient to resolve this issue. The identifier of the patch is 053bf1dfb76ef230db162c64a6ed50ebedf67eee. It is recommended to upgrade the affected component.

CVE-2026-1962 is a vulnerability identified in the open-source project management tool WeKan, affecting all versions from 8.0 through 8.20. The issue resides in an unspecified function within the server-side file server/attachmentMigration.js, part of the Attachment Migration component. The root cause is improper access control, which allows remote attackers to bypass intended restrictions and access or manipulate attachments improperly. The vulnerability can be exploited remotely without user interaction and does not require prior authentication, though it does require low privileges (PR:L). The CVSS 4.0 base score is 5.3, reflecting a medium severity level, with network attack vector (AV:N), low attack complexity (AC:L), no user interaction (UI:N), and limited impact on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). The flaw does not affect system scope or require special privileges beyond low-level access. The vendor has addressed the issue in WeKan version 8.21, with a patch identified by commit 053bf1dfb76ef230db162c64a6ed50ebedf67eee. No public exploits or widespread attacks have been reported to date. This vulnerability could allow unauthorized access to sensitive attachments, potentially exposing confidential project information or enabling data tampering.

Detailed information about CVE-2026-1962: Improper Access Controls in WeKan affecting null WeKan. Get real-time updates, technical details, and mitigation strat

CVE-2026-1962: Improper Access Controls in WeKan - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1962: Improper Access Controls in WeKan

Threats Tagged 'cve-2026-1962'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1962'

Lead Pen Test Professional