Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.

CVE-2026-21625 is a vulnerability classified under CWE-434 (Unrestricted Upload of File with Dangerous Type) affecting the EasyDiscuss extension for Joomla versions 1.0.0 through 5.0.15. The core issue lies in the insufficient validation of user-uploaded files: the extension only checks the file extension but does not verify the MIME type or perform deeper content inspection. This allows attackers to upload files with dangerous content disguised under allowed extensions, potentially leading to remote code execution, website defacement, or unauthorized access if the uploaded files are processed or executed by the server. The vulnerability has a CVSS 4.8 (medium) score, reflecting that it can be exploited remotely over the network with low attack complexity and no privileges required, but it does require user interaction (e.g., tricking a user to upload a malicious file). No known exploits are currently reported in the wild, but the risk remains significant due to the widespread use of Joomla and EasyDiscuss for community forums and discussion boards. The lack of MIME type validation is a common security oversight that can be exploited to bypass extension-based filters. The vulnerability's impact is limited by the need for user interaction and the absence of privilege escalation or direct authentication bypass, but it can still lead to serious consequences if exploited. The vendor has not yet provided patches, so mitigation relies on configuration changes and monitoring.

Detailed information about CVE-2026-21625: CWE-434 Unrestricted Upload of File with Dangerous Type in Stackideas.com EasyDiscuss extension for Joomla affecting 

CVE-2026-21625: CWE-434 Unrestricted Upload of File with Dangerous Type in Stackideas.com EasyDiscuss extension for Joomla - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21625: CWE-434 Unrestricted Upload of File with Dangerous Type in Stackideas.com EasyDiscuss extension for Joomla

Threats Tagged 'cve-2026-21625'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-21625'

Lead Pen Test Professional