Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub_40F820 of the file rc. Executing a manipulation of the argument upnp_waniface/upnp_ssdp_interval/upnp_max_age can lead to command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-2548 is a medium-severity command injection vulnerability affecting the WAYOS FBM-220G router firmware version 24.10.19. The vulnerability resides in the function sub_40F820 of the rc file, which processes arguments related to UPnP settings: upnp_waniface, upnp_ssdp_interval, and upnp_max_age. By manipulating these arguments, an attacker with low privileges can inject arbitrary commands that the system executes, potentially leading to full compromise of the device. The attack vector is remote network access, requiring no user interaction, which increases the risk of exploitation in exposed environments. The vendor was notified early but has not issued any response or patch, leaving the vulnerability unmitigated. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L), no user interaction (UI:N), and impacts on confidentiality, integrity, and availability at a low to medium level (VC:L, VI:L, VA:L). No known exploits have been reported in the wild, but the lack of vendor response and patch availability increases the urgency for organizations to implement compensating controls. The vulnerability could allow attackers to execute arbitrary commands, potentially leading to device takeover, network disruption, or pivoting to other internal systems.

Detailed information about CVE-2026-2548: Command Injection in WAYOS FBM-220G affecting WAYOS FBM-220G. Get real-time updates, technical details, and mitigation

CVE-2026-2548: Command Injection in WAYOS FBM-220G - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2548: Command Injection in WAYOS FBM-220G

Threats Tagged 'cve-2026-2548'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-2548'

Lead Pen Test Professional