Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

hugegraph-server

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process against object injection attacks.




Users are recommended to upgrade to version 1.7.0, which fixes the issue.

CVE-2025-26866 is a remote code execution vulnerability identified in Apache HugeGraph-Server version 1.0.0, stemming from insecure deserialization of untrusted data within the PD store component. The vulnerability arises due to the use of Hessian serialization, which is vulnerable to object injection attacks if deserialization is not properly restricted. In this case, a malicious Raft node—part of the cluster consensus mechanism—can send crafted serialized objects that, when deserialized, lead to arbitrary code execution on the server. This flaw is categorized under CWE-502 (Deserialization of Untrusted Data), a common and dangerous class of vulnerabilities that allow attackers to manipulate serialized data to execute malicious payloads. The attack vector requires network access to the cluster and privileges to join or impersonate a Raft node, which prior to the fix was not sufficiently restricted. The fix implemented in version 1.7.0 includes enforcing IP-based authentication to restrict which nodes can join the cluster and a strict class whitelist during Hessian deserialization to prevent unauthorized object types from being instantiated. This hardening significantly reduces the attack surface by limiting both the network-level access and the deserialization logic. No known exploits are currently reported in the wild, but the high CVSS score of 8.8 reflects the critical nature of the vulnerability due to the potential for full system compromise without user interaction.

Detailed information about CVE-2025-26866: CWE-502 Deserialization of Untrusted Data in Apache Software Foundation Apache HugeGraph-Server affecting Apache Soft

CVE-2025-26866: CWE-502 Deserialization of Untrusted Data in Apache Software Foundation Apache HugeGraph-Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-26866: CWE-502 Deserialization of Untrusted Data in Apache Software Foundation Apache HugeGraph-Server

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11

Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.

CVE-2024-27348 is a remote command execution vulnerability identified in Apache HugeGraph-Server, a graph database server developed by the Apache Software Foundation. The vulnerability affects versions from 1.0.0 up to but not including 1.3.0 when running on Java 8 and Java 11 environments. The root cause is insufficient access control (CWE-284), allowing unauthenticated attackers to remotely execute arbitrary commands on the server. This can lead to full system compromise, including unauthorized data access, modification, or destruction, and potential disruption of service. The vulnerability does not require any privileges or user interaction, making it highly exploitable over the network. Apache fixed the issue in version 1.3.0 by enabling an authentication system that restricts unauthorized access. The CVSS v3.1 score of 9.8 reflects the critical nature of this flaw, with attack vector network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no public exploits have been reported yet, the vulnerability poses a significant threat to organizations using affected versions of HugeGraph-Server, especially those managing sensitive or critical graph data.

Detailed information about CVE-2024-27348: RCE-Remote Command Execution in Apache Software Foundation Apache HugeGraph-Server affecting Apache Software Foundati

CVE-2024-27348: RCE-Remote Command Execution in Apache Software Foundation Apache HugeGraph-Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-27348: RCE-Remote Command Execution in Apache Software Foundation Apache HugeGraph-Server


CVE-2025-26866: CWE-502 Deserialization of Untrusted Data in Apache Software Foundation Apache HugeGraph-ServerCVE-2025-26866 0 A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process against object injection attacks. Users are recommended to upgrade to version 1.7.0, which fixes the issue. HighVulnerabilityUnited StatesChinaGermany+7#cve #cve-2025-26866 #cwe-502 Join the discussion	CVE Database V5	12/12/2025, 09:23:07 UTC Added: 12/12/2025, 09:45:06 UTC
CVE-2024-27348: RCE-Remote Command Execution in Apache Software Foundation Apache HugeGraph-ServerCVE-2024-27348 0 RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue. CriticalVulnerabilityUnited StatesChinaGermany+7#cve #cve-2024-27348 Join the discussion	CVE Database V5	04/22/2024, 14:08:06 UTC Added: 10/21/2025, 19:06:26 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional