Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

eopkg

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by `lseopkg` and related tools. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected.

CVE-2026-21437 identifies a vulnerability in the eopkg package manager, a Python3-based tool used by the Solus Linux distribution. Versions prior to 4.4.0 lack proper support for integrity checking of installed package files, specifically allowing malicious packages to include files that are not tracked by eopkg's package database or visible through tools like lseopkg. This integrity check omission corresponds to CWE-353 (Missing Support for Integrity Check). An attacker who can convince a user to install a package from a malicious or compromised source can exploit this flaw to install hidden files on the system. These files could be used to maintain persistence, hide malicious payloads, or alter system behavior without detection by standard package management queries. The vulnerability requires user interaction to install the malicious package and elevated privileges (high privileges) to exploit, as indicated by the CVSS vector. The CVSS 4.0 base score is 2.0, reflecting low severity due to the limited attack vector (local), required privileges, and user interaction. No known exploits are currently reported in the wild. The issue was addressed in eopkg version 4.4.0 by adding proper integrity checks to ensure all installed files are tracked and visible to package management tools. Users who only install packages from official Solus repositories are not affected, as these repositories are trusted and presumably do not contain malicious packages.

Detailed information about CVE-2026-21437: CWE-353: Missing Support for Integrity Check in getsolus eopkg affecting getsolus eopkg. Get real-time updates, techn

CVE-2026-21437: CWE-353: Missing Support for Integrity Check in getsolus eopkg - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21437: CWE-353: Missing Support for Integrity Check in getsolus eopkg

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given by `--destdir`, but on a different location on the host. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected.

CVE-2026-21436 is a path traversal vulnerability classified under CWE-24 found in the Solus Linux distribution's package manager, eopkg, implemented in Python3. The flaw exists in versions prior to 4.4.0 and allows a malicious package to bypass the directory constraints imposed by the --destdir option during package installation. Normally, --destdir is used to specify a target directory for package installation, often for staging or sandboxing purposes. However, due to insufficient validation of file paths within the package, crafted package files can include path traversal sequences (e.g., '../filedir') that cause files to be installed outside the intended directory. This can lead to unauthorized file writes in arbitrary locations on the host filesystem. Exploitation requires the user to install a package from a malicious or compromised source, which implies user interaction and elevated privileges since package installation typically requires administrative rights. The vulnerability does not impact users who install packages exclusively from the official Solus repositories, as these are assumed to be trusted and not malicious. The issue was addressed and fixed in eopkg version 4.4.0 by implementing proper path sanitization and validation to prevent directory escapes. The CVSS 4.0 base score is 5.8 (medium severity), reflecting the local attack vector, low attack complexity, partial user interaction, and the requirement for privileges. No known exploits have been reported in the wild as of the publication date. This vulnerability could be leveraged to place malicious files in sensitive system locations, potentially leading to privilege escalation or system compromise if combined with other vulnerabilities or misconfigurations.

Detailed information about CVE-2026-21436: CWE-24: Path Traversal: '../filedir' in getsolus eopkg affecting getsolus eopkg. Get real-time updates, technical det

CVE-2026-21436: CWE-24: Path Traversal: '../filedir' in getsolus eopkg - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21436: CWE-24: Path Traversal: '../filedir' in getsolus eopkg


CVE-2026-21437: CWE-353: Missing Support for Integrity Check in getsolus eopkgCVE-2026-21437 0 eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by `lseopkg` and related tools. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected. LowVulnerabilityGermanyFranceUnited Kingdom+2#cve #cve-2026-21437 #cwe-353 Join the discussion	CVE Database V5	01/01/2026, 18:06:02 UTC Added: 01/01/2026, 18:28:48 UTC
CVE-2026-21436: CWE-24: Path Traversal: '../filedir' in getsolus eopkgCVE-2026-21436 0 eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given by `--destdir`, but on a different location on the host. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2026-21436 #cwe-24 Join the discussion	CVE Database V5	01/01/2026, 18:03:17 UTC Added: 01/01/2026, 18:28:48 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional