Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

wekan

A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. Upgrading to version 8.21 is capable of addressing this issue. This patch is called 91a936e07d2976d4246dfe834281c3aaa87f9503. You should upgrade the affected component.

CVE-2026-2207 is a medium severity information disclosure vulnerability affecting the open-source collaborative kanban board application WeKan, specifically versions 8.0 through 8.20. The vulnerability resides in the Activity Publication Handler component, particularly in the processing of the JavaScript file server/publications/activities.js. An attacker can remotely manipulate this component without any authentication or user interaction to disclose sensitive information. The exact nature of the information disclosed is unspecified, but given the component's role in activity publication, it could include user activity data or internal system details. The vulnerability is exploitable over the network with low attack complexity and no privileges required, increasing the risk of unauthorized data exposure. The issue was addressed in WeKan version 8.21 by applying a patch (commit 91a936e07d2976d4246dfe834281c3aaa87f9503) that corrects the processing flaw. No public exploits have been observed, but the ease of exploitation and lack of authentication requirements make timely patching critical. The vulnerability is tracked under CVSS version 4.0 with a score of 6.9, reflecting moderate impact primarily on confidentiality with no impact on integrity or availability.

Detailed information about CVE-2026-2207: Information Disclosure in WeKan affecting null WeKan. Get real-time updates, technical details, and mitigation strateg

CVE-2026-2207: Information Disclosure in WeKan - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2207: Information Disclosure in WeKan

Threats Tagged 'cve-2026-2207'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-2207'

Lead Pen Test Professional