Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

outray

CVE-2026-22819 is a medium-severity race condition vulnerability in the open-source ngrok alternative 'outray' prior to version 0.1.5. It allows free plan users to obtain more subdomains than intended due to missing database transaction locking in the subdomain allocation code. The flaw impacts integrity and availability but does not affect confidentiality. Exploitation requires network access and low privileges but no user interaction. The vulnerability is fixed in version 0.1.5. There are no known exploits in the wild.

CVE-2026-22819 is a race condition vulnerability classified under CWE-366, found in the open-source project 'outray', an alternative to ngrok used for creating secure tunnels to localhost services. The vulnerability exists in versions prior to 0.1.5 within the subdomain allocation logic located in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. Specifically, the issue arises from the lack of database transaction locking mechanisms when allocating subdomains to users on the free plan. This absence of locking allows a race condition where a user can simultaneously request multiple subdomains, bypassing intended limits and obtaining more subdomains than permitted. The vulnerability affects the integrity of the system by allowing unauthorized resource allocation and impacts availability by potentially exhausting subdomain resources. The CVSS v3.1 score is 5.9 (medium), with vector AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H, indicating network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No known exploits have been reported in the wild. The issue was addressed in version 0.1.5 by introducing proper database transaction locks to serialize subdomain allocation requests, preventing concurrent race conditions.

Detailed information about CVE-2026-22819: CWE-366: Race Condition within a Thread in akinloluwami outray affecting akinloluwami outray. Get real-time updates, 

CVE-2026-22819: CWE-366: Race Condition within a Thread in akinloluwami outray - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22819: CWE-366: Race Condition within a Thread in akinloluwami outray

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.

CVE-2026-22820 identifies a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the open-source tool 'outray', an alternative to ngrok used for creating secure tunnels. The vulnerability exists in versions prior to 0.1.5 and allows an attacker to circumvent subscription plan limits by creating more active tunnels than permitted. This occurs because the software checks the number of active tunnels (time-of-check) but does not properly synchronize or lock this state before allowing tunnel creation (time-of-use), enabling a race condition where multiple tunnel creation requests can bypass the limit. The flaw requires no authentication or user interaction and can be exploited remotely, increasing its risk profile. The CVSS 4.0 score is 6.3 (medium), reflecting network attack vector, high attack complexity, and limited impact on integrity. Although no known exploits are reported, the vulnerability undermines subscription enforcement and could lead to resource overuse or denial of service to legitimate users. The issue was resolved in outray version 0.1.5 by implementing appropriate synchronization mechanisms to prevent concurrent tunnel creation beyond allowed limits.

Detailed information about CVE-2026-22820: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in akinloluwami outray affecting akinloluwami outray. Get 

CVE-2026-22820: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in akinloluwami outray - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22820: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in akinloluwami outray


CVE-2026-22819: CWE-366: Race Condition within a Thread in akinloluwami outrayCVE-2026-22819 0 CVE-2026-22819 is a medium-severity race condition vulnerability in the open-source ngrok alternative 'outray' prior to version 0.1.5. It allows free plan users to obtain more subdomains than intended due to missing database transaction locking in the subdomain allocation code. The flaw impacts integrity and availability but does not affect confidentiality. Exploitation requires network access and low privileges but no user interaction. The vulnerability is fixed in version 0.1.5. There are no known exploits in the wild. MediumVulnerabilityGermanyFranceNetherlands+2#cve #cve-2026-22819 #cwe-366 Join the discussion	CVE Database V5	01/14/2026, 18:04:33 UTC Added: 01/14/2026, 18:18:43 UTC
CVE-2026-22820: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in akinloluwami outrayCVE-2026-22820 0 Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2026-22820 #cwe-367 Join the discussion	CVE Database V5	01/14/2026, 15:06:51 UTC Added: 01/14/2026, 15:18:48 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional