Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The embedded web interface of the device does not support HTTPS/TLS for 
authentication and uses HTTP Basic Authentication. Traffic is encoded 
but not encrypted, exposing user credentials to passive interception by 
attackers on the same network.

CVE-2026-24455 identifies a security vulnerability in the USR-W610 device manufactured by Jinan USR IOT Technology Limited (PUSR). The core issue lies in the device's embedded web interface, which relies on HTTP Basic Authentication transmitted over unencrypted HTTP connections. While the credentials are encoded (likely base64), they are not encrypted, making them susceptible to passive interception by any attacker sharing the same network segment. This vulnerability corresponds to CWE-319, which concerns the cleartext transmission of sensitive information. The lack of HTTPS/TLS support means that all authentication traffic is exposed to network sniffing tools, enabling attackers to capture usernames and passwords without active interaction or elevated privileges. The CVSS v3.1 score of 7.5 reflects a high severity due to the network attack vector, low attack complexity, no privileges or user interaction required, and a high impact on confidentiality. The vulnerability affects all versions of the USR-W610 device, and no patches or mitigations have been officially released as of the publication date. Although no known exploits have been reported in the wild, the vulnerability presents a significant risk in environments where the device is deployed, especially in unsecured or shared network environments.

Detailed information about CVE-2026-24455: CWE-319 in Jinan USR IOT Technology Limited (PUSR) USR-W610 affecting Jinan USR IOT Technology Limited (PUSR) USR-W61

CVE-2026-24455: CWE-319 in Jinan USR IOT Technology Limited (PUSR) USR-W610 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-24455: CWE-319 in Jinan USR IOT Technology Limited (PUSR) USR-W610

Threats Tagged 'cve-2026-24455'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-24455'

Lead Pen Test Professional