Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.

CVE-2026-26340 is a vulnerability classified under CWE-306 (Missing Authentication for Critical Function) affecting Tattile s.r.l.'s Smart+, Vega, and Basic device families with firmware versions 1.181.5 and prior. The root cause is the lack of authentication enforcement on the Real Time Streaming Protocol (RTSP) service embedded in these devices. RTSP is commonly used for streaming live video and audio data from surveillance cameras. Due to this flaw, any remote attacker with network access to the device can connect to the RTSP service and retrieve live surveillance streams without providing any credentials. This bypasses intended access controls and exposes sensitive video and audio feeds. The vulnerability has a CVSS v4.0 base score of 8.7, reflecting its high impact and ease of exploitation. The attack vector is network-based with no required privileges or user interaction, and the scope is unchanged as the vulnerability affects only the confidentiality of the streams. No patches or mitigations have been officially released at the time of publication, and no exploits have been observed in the wild. The vulnerability affects critical surveillance infrastructure, potentially compromising privacy and security in environments relying on these devices for monitoring and control.

Detailed information about CVE-2026-26340: CWE-306 Missing Authentication for Critical Function in Tattile s.r.l. Smart+ affecting Tattile s.r.l. Smart+. Get re

CVE-2026-26340: CWE-306 Missing Authentication for Critical Function in Tattile s.r.l. Smart+ - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-26340: CWE-306 Missing Authentication for Critical Function in Tattile s.r.l. Smart+

Threats Tagged 'cve-2026-26340'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-26340'

Lead Pen Test Professional