Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password.

CVE-2026-21411 identifies an authentication bypass vulnerability in Plat'Home Co.,Ltd.'s OpenBlocks IoT DX1 devices running firmware versions prior to FW5.0.8. The vulnerability arises from the device's handling of authentication mechanisms, where an attacker can exploit an alternate path or communication channel to circumvent administrator authentication controls. This bypass does not require any privileges or user interaction, making it remotely exploitable over the network. Once exploited, the attacker can change the administrator password, effectively gaining full administrative control over the device. This control enables unauthorized configuration changes, potential deployment of malicious payloads, and disruption of device functionality. The vulnerability affects all versions before FW5.0.8, and no patches were available at the time of publication, although users are advised to upgrade to FW5.0.8 or later once released. The CVSS v3.0 score of 8.8 reflects the vulnerability's high impact on confidentiality, integrity, and availability, combined with low attack complexity and no required privileges or user interaction. The device's role as an IoT gateway in industrial and enterprise environments amplifies the risk, as compromise could lead to broader network infiltration or operational disruptions. No known exploits have been reported in the wild yet, but the vulnerability's characteristics make it an attractive target for attackers seeking to gain persistent access to IoT infrastructure.

Detailed information about CVE-2026-21411: Authentication Bypass Using an Alternate Path or Channel in Plat'Home Co.,Ltd. OpenBlocks IoT DX1 (FW5.0.x) affecting

CVE-2026-21411: Authentication Bypass Using an Alternate Path or Channel in Plat'Home Co.,Ltd. OpenBlocks IoT DX1 (FW5.0.x) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21411: Authentication Bypass Using an Alternate Path or Channel in Plat'Home Co.,Ltd. OpenBlocks IoT DX1 (FW5.0.x)

Threats Tagged 'cve-2026-21411'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-21411'

Lead Pen Test Professional