Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is df535f5524314620715e842baf9723efbeb481a7. Applying a patch is the recommended action to fix this issue.

CVE-2026-1739 is a vulnerability discovered in the Free5GC open-source 5G core network implementation, specifically affecting the Policy Control Function (pcf) component up to version 1.4.1. The issue is located in the HandleCreateSmPolicyRequest function within the internal/sbi/processor/smpolicy.go source file. The vulnerability manifests as a null pointer dereference triggered by crafted requests to the pcf, which leads to a crash of the pcf service. Since the pcf is responsible for policy control decisions in 5G networks, its unavailability can disrupt network operations. The vulnerability can be exploited remotely without requiring any authentication or user interaction, increasing the risk of denial-of-service attacks against affected deployments. The CVSS v4.0 base score is 6.9, reflecting medium severity, with an attack vector of network and low complexity. The vulnerability does not impact confidentiality, integrity, or availability beyond causing service disruption (denial of service). A patch has been released and identified by commit df535f5524314620715e842baf9723efbeb481a7, which fixes the null pointer dereference by adding proper input validation and error handling in the affected function. No public exploits are currently known to be in the wild, but the vulnerability has been publicly disclosed, which may increase the risk of exploitation attempts.

Detailed information about CVE-2026-1739: NULL Pointer Dereference in Free5GC pcf affecting Free5GC pcf. Get real-time updates, technical details, and mitigatio

CVE-2026-1739: NULL Pointer Dereference in Free5GC pcf - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1739: NULL Pointer Dereference in Free5GC pcf

Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId.

CVE-2025-66720 is a software vulnerability identified in the free5gc Policy Control Function (PCF) version 1.4.0, a component of the open-source 5G core network implementation. The vulnerability arises from a null pointer dereference in the function HandleDeletePoliciesPolAssoId, located in the internal/sbi/processor/ampolicy.go source file. A null pointer dereference occurs when the software attempts to access or manipulate memory through a pointer that has not been properly initialized or has been set to null, leading to a runtime error and process crash. In this context, the flaw can cause the PCF process to terminate unexpectedly when handling specific delete policy association requests, resulting in denial of service (DoS) conditions. The PCF is critical in 5G networks as it manages policy rules and charging control, influencing how network resources are allocated and how subscriber sessions are handled. Although no CVSS score has been assigned and no known exploits are reported in the wild, the vulnerability's presence in a core network function means that successful exploitation could disrupt 5G service continuity. The vulnerability was reserved in December 2025 and published in January 2026, indicating recent discovery. The lack of patch links suggests that fixes may not yet be publicly available, emphasizing the need for proactive mitigation. Exploitation likely requires interaction with the PCF's SBI (Service-Based Interface), which may be exposed internally or externally depending on network architecture. This vulnerability highlights the importance of rigorous input validation and error handling in telecom software components to prevent service outages.

Detailed information about CVE-2025-66720: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-66720: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66720: n/a


CVE-2026-1739: NULL Pointer Dereference in Free5GC pcfCVE-2026-1739 0 A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is df535f5524314620715e842baf9723efbeb481a7. Applying a patch is the recommended action to fix this issue. MediumVulnerabilityUnited StatesChinaSouth Korea+7#cve #cve-2026-1739 Join the discussion	CVE Database V5	02/02/2026, 02:02:10 UTC Added: 02/02/2026, 02:12:48 UTC
CVE-2025-66720: n/aCVE-2025-66720 0 Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId. HighVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-66720 Join the discussion	CVE Database V5	01/23/2026, 00:00:00 UTC Added: 01/23/2026, 15:50:57 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional