Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The web management interface of the device renders the passwords in a 
plaintext input field. The current password is directly visible to 
anyone with access to the UI, potentially exposing administrator 
credentials to unauthorized observation via shoulder surfing, 
screenshots, or browser form caching.

CVE-2026-26049 identifies a security weakness in the USR-W610 device's web management interface developed by Jinan USR IOT Technology Limited (PUSR). The vulnerability is classified under CWE-522, which pertains to the exposure of credentials in plaintext. Specifically, the device's web UI displays the administrator password in a plaintext input field rather than masking it. This design flaw allows anyone with access to the device's management interface to view the password directly without needing to extract it from encrypted storage or intercept network traffic. The risk is elevated in scenarios where multiple users share physical or remote UI access, or where screenshots or browser form caching mechanisms can capture the password. The CVSS v3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) indicates that the vulnerability can be exploited remotely over the network with low attack complexity, requires privileges (limited user access), and user interaction (accessing the UI). The impact is high on confidentiality since the password is exposed, but there is no direct impact on integrity or availability. No patches or known exploits have been reported as of the publication date, but the vulnerability poses a significant risk for credential leakage and subsequent unauthorized access if exploited.

Detailed information about CVE-2026-26049: CWE-522 in Jinan USR IOT Technology Limited (PUSR) USR-W610 affecting Jinan USR IOT Technology Limited (PUSR) USR-W61

CVE-2026-26049: CWE-522 in Jinan USR IOT Technology Limited (PUSR) USR-W610 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-26049: CWE-522 in Jinan USR IOT Technology Limited (PUSR) USR-W610

Threats Tagged 'cve-2026-26049'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-26049'

Lead Pen Test Professional