Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

php-phpseclib

phpseclib

php-phpseclib3

phpseclib versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 contain a vulnerability in AES CBC mode padding validation that can be exploited via a padding oracle timing attack. This flaw allows a remote attacker to potentially obtain sensitive information. The issue has been fixed in versions 1.0.27, 2.0.52, and 3.0.50. Ubuntu has released security updates addressing this vulnerability across multiple LTS releases, with fixes available through standard system updates or Ubuntu Pro Extended Security Maintenance (ESM).

phpseclib, a PHP secure communications library, did not perform padding validation in constant time when using AES in CBC mode, enabling a padding oracle timing attack (CVE-2026-32935). This vulnerability affects versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49. Remote attackers could exploit this timing discrepancy to obtain sensitive information. Ubuntu advisories USN-8769-1 and USN-8830-1 confirm the issue and provide fixed package versions for multiple Ubuntu LTS releases. The vulnerability is rated medium severity with a CVSS 3.1 score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

Detailed information about Php phpseclib: Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to pa

Php phpseclib: Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack… (CVE-2026-32935) - Live Threat Intelligence - Threat Radar | OffSeq.com

Php phpseclib: Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack… (CVE-2026-32935)

Threats Tagged 'cve-2026-32935'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-32935'

Lead Pen Test Professional