Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource.

CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

CVE-2026-1997 identifies a vulnerability categorized under CWE-346 (Origin Validation Error) in the HP OfficeJet Pro 8730 All-in-One Printer. The issue arises from a misconfiguration of Cross-Origin Resource Sharing (CORS) settings within the printer's Embedded Web Server (EWS). CORS is a security feature implemented in web browsers to control how resources are shared between different origins. In this context, if CORS is enabled improperly on the printer, it may allow unauthorized web origins to access device resources that should be restricted. This could lead to information disclosure, as unauthorized websites could retrieve sensitive data from the printer without authentication. By default, HP disables CORS on Pro-class devices, and enabling it requires administrative action through the EWS interface. The vulnerability does not require user interaction, authentication, or elevated privileges to exploit, and it is remotely exploitable over the network. The CVSS v4.0 score of 6.9 reflects a medium severity, primarily due to the potential for information exposure without direct impact on device integrity or availability. No public exploits or patches are currently known, emphasizing the importance of preventive configuration management. The vulnerability highlights the risks associated with improper origin validation and the need for strict access controls on networked devices with web interfaces.

Detailed information about CVE-2026-1997: CWE-346 in HP Inc HP OfficeJet Pro 8730 All-in-One Printer affecting HP Inc HP OfficeJet Pro 8730 All-in-One Printer. 

CVE-2026-1997: CWE-346 in HP Inc HP OfficeJet Pro 8730 All-in-One Printer - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1997: CWE-346 in HP Inc HP OfficeJet Pro 8730 All-in-One Printer

Threats Tagged 'cve-2026-1997'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1997'

Lead Pen Test Professional