Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

compass

When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

The vulnerability CVE-2026-14881 in MongoDB Compass 1.38.0 involves improper neutralization of special elements used in OS commands (CWE-78). When importing connections, an attacker can override connection options that are otherwise immutable through the UI, notably the browser open command used in the OIDC authentication flow. This allows injection of arbitrary OS commands, potentially leading to high impact on confidentiality, integrity, and availability as indicated by the CVSS 8.4 score. No official patch or remediation guidance has been published yet, and no known exploits are reported in the wild.

Detailed information about CVE-2026-14881: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in MongoDB MongoDB 

CVE-2026-14881: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in MongoDB MongoDB Compass - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-14881: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in MongoDB MongoDB Compass

Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution.

This vulnerability involves improper control of object prototype attributes (CWE-1321) in the CSV import functionality of MongoDB Compass. Specifically, prototype pollution in the CSV parsing logic can cause untrusted file paths to be passed to shell.openExternal after certain user interactions, resulting in a potential '1-click' command execution scenario. The issue affects a wide range of Compass versions from 1.36.3 to 1.49.5. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and low impact on integrity. No vendor advisory or patch information is currently available.

Detailed information about CVE-2026-9101: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in MongoDB, Inc. C

CVE-2026-9101: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in MongoDB, Inc. Compass - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-9101: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in MongoDB, Inc. Compass


CVE-2026-14881: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in MongoDB MongoDB CompassCVE-2026-14881 0 When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings. HighVulnerability#cve #cve-2026-14881 #cwe-78 Join the discussion	CVE Database V5	07/22/2026, 19:23:17 UTC Added: 07/22/2026, 20:08:01 UTC
CVE-2026-9101: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in MongoDB, Inc. CompassCVE-2026-9101 0 Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution. MediumVulnerability#cve #cve-2026-9101 #cwe-1321 Join the discussion	CVE Database V5	05/20/2026, 16:18:10 UTC Added: 05/20/2026, 16:33:50 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional