Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Wi-Fi router is vulnerable to de-authentication attacks due to the 
absence of management frame protection, allowing forged deauthentication
 and disassociation frames to be broadcast without authentication or 
encryption. An attacker can use this to cause unauthorized disruptions 
and create a denial-of-service condition.

CVE-2026-26048 identifies a vulnerability in the USR-W610 Wi-Fi router manufactured by Jinan USR IOT Technology Limited. The core issue stems from the absence of management frame protection, a security feature designed to authenticate and encrypt management frames such as deauthentication and disassociation messages in Wi-Fi networks. Without this protection, attackers can forge these frames and broadcast them to connected clients, causing them to disconnect from the network unexpectedly. This type of attack is commonly known as a deauthentication attack and is a form of denial-of-service (DoS) against wireless clients. The vulnerability is classified under CWE-306, which refers to missing authentication for critical functions, highlighting that the router fails to verify the legitimacy of management frames. The CVSS v3.1 base score is 7.5, reflecting a high severity due to the network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality (C:H) but no impact on integrity or availability. The lack of management frame protection means attackers can disrupt wireless communications without needing to authenticate or interact with users, making exploitation straightforward. Although no public exploits are currently known, the vulnerability poses a significant risk to environments using this router, especially where wireless connectivity is critical. The affected version is listed as '0', which likely indicates all current firmware versions or an unspecified version. No patches or mitigations have been officially released at the time of publication. This vulnerability can be leveraged to cause service disruptions, potentially impacting sensitive communications and operational continuity.

Detailed information about CVE-2026-26048: CWE-306 in Jinan USR IOT Technology Limited (PUSR) USR-W610 affecting Jinan USR IOT Technology Limited (PUSR) USR-W61

CVE-2026-26048: CWE-306 in Jinan USR IOT Technology Limited (PUSR) USR-W610 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-26048: CWE-306 in Jinan USR IOT Technology Limited (PUSR) USR-W610

Threats Tagged 'cve-2026-26048'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-26048'

Lead Pen Test Professional