Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ironic

OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.

CVE-2026-46447 is a vulnerability in OpenStack Ironic before version 35.0.2 where an attacker who can set node.driver_info or node.instance_info can perform boot script injection of an iPXE script. This represents an incorrect resource transfer between spheres (CWE-669), potentially allowing the attacker to influence the boot process. The vulnerability has a CVSS 3.1 base score of 5.8, with network attack vector, high attack complexity, requiring high privileges, no user interaction, and a scope change. The impact is integrity loss without confidentiality or availability impact.

Detailed information about CVE-2026-46447: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-46447: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-46447: CWE-669 Incorrect Resource Transfer Between Spheres in OpenStack Ironic

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.

The vulnerability CVE-2026-42997 in OpenStack Ironic (prior to 35.0.1) is categorized under CWE-669 (Incorrect Resource Transfer Between Spheres). During the import operation, a user invoking molds can request that authorization credentials be sent to a remote endpoint. These credentials include a time-limited Keystone token, which grants access to all OpenStack services that Ironic is authorized to access, or basic credentials configured for molds storage. This behavior can lead to unintended credential disclosure. The issue has been addressed in versions 26.1.6, 29.0.5, 32.0.1, and 35.0.1. The CVSS v3.1 base score is 7.7 (High), with vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, indicating network attack vector, low attack complexity, requiring low privileges, no user interaction, scope changed, high confidentiality impact, no integrity or availability impact. Red Hat has issued an important security advisory with updated packages to fix this vulnerability in their OpenStack Services on OpenShift 18.0 distribution.

Detailed information about CVE-2026-42997: CWE-669 Incorrect Resource Transfer Between Spheres in OpenStack Ironic affecting OpenStack Ironic. Get real-time upd

CVE-2026-42997: CWE-669 Incorrect Resource Transfer Between Spheres in OpenStack Ironic - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-42997: CWE-669 Incorrect Resource Transfer Between Spheres in OpenStack Ironic


CVE-2026-46447: CWE-669 Incorrect Resource Transfer Between Spheres in OpenStack IronicCVE-2026-46447 0 OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info. MediumVulnerability#cve #cve-2026-46447 #cwe-669 Join the discussion	CVE Database V5	06/03/2026, 00:00:00 UTC Added: 06/03/2026, 21:18:37 UTC
CVE-2026-42997: CWE-669 Incorrect Resource Transfer Between Spheres in OpenStack IronicCVE-2026-42997 0 An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1. HighVulnerability#cve #cve-2026-42997 #cwe-669 Join the discussion	CVE Database V5	05/05/2026, 00:00:00 UTC Added: 05/05/2026, 18:21:55 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional