Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

loki

Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

The vulnerability identified as CVE-2026-21729 affects Grafana Loki version 3.0.0. It involves the handling of queries with large limits, which can trigger large memory allocations. This excessive memory consumption can degrade or disrupt the availability of the Loki service. The issue is categorized under CWE-770 (Allocation of Resources Without Limits or Throttling). No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Detailed information about CVE-2026-21729: Vulnerability in Grafana Loki affecting Grafana Loki. Get real-time updates, technical details, and mitigation strate

CVE-2026-21729: Vulnerability in Grafana Loki - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21729: Vulnerability in Grafana Loki

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}

Thanks to Prasanth Sundararajan for reporting this vulnerability.

This vulnerability in Grafana Loki 2.3.0 involves improper validation of the namespace parameter in the Ruler API endpoint /loki/api/v1/rules/{namespace}. Although CVE-2021-36156 addressed path traversal by validating the parameter after a single URL decode, an attacker can bypass this by double encoding the path traversal sequences. This allows unauthorized reading of files on the system. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality impact. There is no official remediation or patch available as of the published date.

Detailed information about CVE-2026-21726: Vulnerability in Grafana Loki affecting Grafana Loki. Get real-time updates, technical details, and mitigation strate

CVE-2026-21726: Vulnerability in Grafana Loki - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21726: Vulnerability in Grafana Loki


CVE-2026-21729: Vulnerability in Grafana LokiCVE-2026-21729 0 Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. HighVulnerability#cve #cve-2026-21729 Join the discussion	CVE Database V5	07/16/2026, 03:12:07 UTC Added: 07/16/2026, 07:55:15 UTC
CVE-2026-21726: Vulnerability in Grafana LokiCVE-2026-21726 0 The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace} Thanks to Prasanth Sundararajan for reporting this vulnerability. MediumVulnerability#cve #cve-2026-21726 #gcve Join the discussion	CVE Database V5	04/15/2026, 19:24:31 UTC Added: 04/15/2026, 20:01:55 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional