Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.

This vulnerability (CVE-2026-47370) involves improper input validation in UniFi OS Server by Ubiquiti Inc. An attacker with network access and low privileges can exploit this flaw to execute arbitrary commands on the device, potentially leading to full system compromise. The vulnerability is categorized under CWE-20 and carries a CVSS v3.1 score of 9.9, reflecting critical severity with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No official remediation or patch information is currently available, and no known exploits in the wild have been reported.

Detailed information about CVE-2026-47370: CWE-20 Improper Input Validation in Ubiquiti Inc UniFi OS Server affecting Ubiquiti Inc UniFi OS Server. Get real-tim

CVE-2026-47370: CWE-20 Improper Input Validation in Ubiquiti Inc UniFi OS Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-47370: CWE-20 Improper Input Validation in Ubiquiti Inc UniFi OS Server

CVE-2026-47367 is a critical Improper Input Validation vulnerability in Ubiquiti Inc's UID Enterprise Agent. It allows a low-privileged attacker with network access to perform command injection on the host device. The vulnerability has a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided. There are no known exploits in the wild at this time.

This vulnerability (CVE-2026-47367) in the UID Enterprise Agent from Ubiquiti Inc involves improper input validation (CWE-20) that can be exploited by an attacker with network access and low privileges to execute arbitrary commands on the host system. The issue enables command injection, potentially compromising the device fully. The CVSS 3.1 base score is 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, required low privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. No official patch or fix information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Detailed information about Ubiquiti UniFi OS: Mehrere Schwachstellen affecting Bundesamt für Sicherheit in der Informationstechnik Ubiquiti. Get real-time updat

CWE-20 Improper Input Validation in Ubiquiti Inc UID Enterprise Agent (CVE-2026-47367) - Live Threat Intelligence - Threat Radar | OffSeq.com

CWE-20 Improper Input Validation in Ubiquiti Inc UID Enterprise Agent (CVE-2026-47367)


CVE-2026-47370: CWE-20 Improper Input Validation in Ubiquiti Inc UniFi OS ServerCVE-2026-47370 0 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances. CriticalVulnerability#cve #cve-2026-47370 #cwe-20 Join the discussion	CVE Database V5	06/12/2026, 02:27:43 UTC Added: 06/12/2026, 03:30:07 UTC
CWE-20 Improper Input Validation in Ubiquiti Inc UID Enterprise Agent (CVE-2026-47367)CVE-2026-47367 0 CVE-2026-47367 is a critical Improper Input Validation vulnerability in Ubiquiti Inc's UID Enterprise Agent. It allows a low-privileged attacker with network access to perform command injection on the host device. The vulnerability has a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided. There are no known exploits in the wild at this time. CriticalVulnerability#gcve #csaf #cve-2026-47367 Join the discussion	GCVE Database	06/12/2026, 02:27:43 UTC Added: 06/11/2026, 09:09:32 UTC

Threats Tagged 'cve-2026-47370'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-47370'

Lead Pen Test Professional