Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

dcm4chee-arc-light

In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.

In dcm4chee-arc-light version 5.35.1, the archive accepts DICOM associations from unregistered calling AEs by default. This lack of proper access control (CWE-306) allows a remote peer to perform C-FIND and C-GET operations to enumerate and retrieve sensitive patient data and medical images. Additionally, the attacker can use C-STORE to file fabricated study content under an existing patient identity, potentially compromising data integrity and patient records.

CVE-2026-105279 is a critical vulnerability in J4Care's dcm4chee-arc-light version 5.35.1. The default configuration allows the archive to accept DICOM associations from unregistered calling Application Entities (AEs). This enables remote attackers to enumerate and retrieve patient information and m

CVE-2026-105279: CWE-306 in J4Care dcm4chee-arc-light

JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.

This vulnerability, identified as CWE-835 (Loop with Unreachable Exit Condition), affects the JPEGParser in dcm4chee-arc-light version 5.35.1. When parsing certain malformed or truncated JPEG streams, the parser may enter an infinite loop, causing the application to hang or become unresponsive. The CVSS 3.1 score is 7.5, reflecting a network attack vector with low complexity, no privileges or user interaction required, and an impact limited to availability (denial of service). No confidentiality or integrity impact is noted. There is no indication of known exploits in the wild or vendor-provided patches at this time.

CVE-2026-107621 is a high severity vulnerability in J4Care's dcm4chee-arc-light version 5.35.1. The JPEGParser component can enter an infinite loop when processing a specially crafted or truncated JPEG stream, leading to a denial of service condition.

CVE-2026-107621: CWE-835 in J4Care dcm4chee-arc-light

The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE causes PurgeStorageScheduler to delete the referenced object from storage even though the corresponding instance record remains in the database.

This vulnerability (CVE-2026-97851) in dcm4chee-arc-light version 5.35.1 involves improper authorization (CWE-862) in the storage status-change REST service. It permits changing location records still linked to DICOM instances to deletion states such as TO_DELETE. When this occurs, the PurgeStorageScheduler deletes the referenced object from storage, but the instance record in the database is not removed, causing a mismatch between stored data and database records. The CVSS 3.1 score is 9.1 (critical), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but high integrity and availability impacts.

CVE-2026-97851 is a critical vulnerability in J4Care's dcm4chee-arc-light version 5.35.1. The issue arises from the storage status-change REST service, which allows changing location records associated with DICOM instances to deletion-related states improperly. Specifically, setting a location to TO


CVE-2026-105279: CWE-306 in J4Care dcm4chee-arc-lightCVE-2026-105279 0 In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity. CriticalVulnerability#cve #cve-2026-105279 #cwe-306 Join the discussion	CVE Database V5	10/16/2026, 14:30:51 UTC Added: 10/16/2026, 15:04:09 UTC
CVE-2026-107621: CWE-835 in J4Care dcm4chee-arc-lightCVE-2026-107621 0 JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream. HighVulnerability#cve #cve-2026-107621 #cwe-835 Join the discussion	CVE Database V5	10/16/2026, 14:19:32 UTC Added: 10/16/2026, 14:49:14 UTC
CVE-2026-97851: CWE-862 in J4Care dcm4chee-arc-lightCVE-2026-97851 0 The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE causes PurgeStorageScheduler to delete the referenced object from storage even though the corresponding instance record remains in the database. CriticalVulnerability#cve #cve-2026-97851 #cwe-862 Join the discussion	CVE Database V5	10/16/2026, 14:16:55 UTC Added: 10/16/2026, 14:49:14 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional