Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Join the discussion | CVE Database V5 | 07/21/2026, 19:18:59 UTC Added: 07/21/2026, 19:42:45 UTC |
0 Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * yggdrasil-worker-forwarder: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186) * yggdrasil-worker-forwarder: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * yggdrasil-worker-forwarder: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * yggdrasil-worker-forwarder: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * yggdrasil-worker-forwarder: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) * python3.12-pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701) Join the discussion | GCVE Database | 07/20/2026, 19:33:17 UTC Added: 07/21/2026, 19:57:46 UTC |
CVE-2026-39836 is a high-severity vulnerability in the Go standard library's net package on Windows platforms. The Dial and LookupPort functions panic when given input containing a NUL (0) character, causing an uncaught exception that can crash the application. This results in a denial of service condition. There is no impact on confidentiality or integrity reported. No official patch or remediation guidance is currently available, and no exploits are known in the wild. Join the discussion | CVE Database V5 | 05/10/2026, 01:03:03 UTC Added: 05/07/2026, 20:06:25 UTC |
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. Join the discussion | CVE Database V5 | 05/07/2026, 19:41:19 UTC Added: 05/07/2026, 20:06:25 UTC |
Showing 1 to 4 of 4 results