Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Planyo Online Reservation System WordPress plugin (versions up to and including 3.0) contains a Server-Side Request Forgery (SSRF) vulnerability that allows unauthenticated attackers to read arbitrary local files. The vulnerability arises because the plugin's AJAX proxy endpoint does not properly validate URL schemes, permitting file:// URLs to bypass host allowlist checks and access sensitive server files such as /etc/passwd and wp-config.php.

CVE-2026-3576 is an SSRF vulnerability in the Planyo Online Reservation System WordPress plugin affecting all versions up to 3.0. The vulnerability exists in the ulap.php file, which acts as an AJAX proxy accessible without authentication or WordPress bootstrapping. The send_http_post() function attempts to validate the host of the provided URL against an allowlist including 'localhost' but fails to validate the URL scheme. This allows attackers to supply file:// URLs that bypass the host check because parse_url() returns 'localhost' as the host. The URL is then passed to curl_init() or fopen(), which support file://, enabling arbitrary local file read and disclosure of sensitive server files.

Exploit code for Planyo_Online_Reservation_System  3.0 - Arbitrary File Read via SSRF

Detailed information about CVE-2026-3576: CWE-20 Improper Input Validation in xtreeme Planyo online reservation system affecting xtreeme Planyo online reservati

CVE-2026-3576: CWE-20 Improper Input Validation in xtreeme Planyo online reservation system - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3576: CWE-20 Improper Input Validation in xtreeme Planyo online reservation system

Threats Tagged 'cve-2026-3576'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-3576'

Lead Pen Test Professional