Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

fastchat

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was fixed in commit 34eca62 for gradio_block_arena_named.py, but three other files were missed.

This vulnerability in lm-sys fastchat (up to version 0.2.36) involves incorrect control flow manipulation in the add_text function of the Arena Side-by-Side View Handler component. The flaw allows an unauthenticated remote attacker to influence the program's control flow, potentially leading to unintended behavior. A partial fix was applied to one file (gradio_block_arena_named.py), but three other files remain unaddressed, leaving the vulnerability present. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on integrity. No official patch or remediation level has been published.

Detailed information about CVE-2026-6608: Incorrect Control Flow in lm-sys fastchat affecting lm-sys fastchat. Get real-time updates, technical details, and mit

CVE-2026-6608: Incorrect Control Flow in lm-sys fastchat - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-6608: Incorrect Control Flow in lm-sys fastchat

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is c9e84b89c91d45191dc24466888de526fa04cf33. It is suggested to install a patch to address this issue. Commit ff66426 patched this issue in api_generate of base_model_worker.py and did miss other entry points.

This vulnerability in lm-sys fastchat up to version 0.2.36 involves the api_generate function of the Worker API Endpoint, where remote manipulation can lead to excessive resource consumption. The issue was patched in commit c9e84b89c91d45191dc24466888de526fa04cf33 targeting base_model_worker.py, but the patch may not cover all entry points. The CVSS 4.0 score is 6.9 (medium severity), indicating a network attack vector with no privileges or user interaction required, and limited impact on availability due to resource consumption.

Detailed information about CVE-2026-6607: Resource Consumption in lm-sys fastchat affecting lm-sys fastchat. Get real-time updates, technical details, and mitig

CVE-2026-6607: Resource Consumption in lm-sys fastchat - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-6607: Resource Consumption in lm-sys fastchat


CVE-2026-6608: Incorrect Control Flow in lm-sys fastchatCVE-2026-6608 0 A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was fixed in commit 34eca62 for gradio_block_arena_named.py, but three other files were missed. MediumVulnerability#cve #cve-2026-6608 Join the discussion	CVE Database V5	04/20/2026, 05:15:12 UTC Added: 04/20/2026, 06:01:45 UTC
CVE-2026-6607: Resource Consumption in lm-sys fastchatCVE-2026-6607 0 A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is c9e84b89c91d45191dc24466888de526fa04cf33. It is suggested to install a patch to address this issue. Commit ff66426 patched this issue in api_generate of base_model_worker.py and did miss other entry points. MediumVulnerability#cve #cve-2026-6607 Join the discussion	CVE Database V5	04/20/2026, 05:00:23 UTC Added: 04/20/2026, 05:16:06 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional