Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This security update provides a functional equivalent of RHSA-2026:42828.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:42828.

The Red Hat Security Advisory RHSA-2026:41906 and RHSA-2026:34109 describe security updates for the Apache HTTP Server (httpd) packages in Red Hat Enterprise Linux 9 and 10. The updates address several vulnerabilities including an incomplete fix for CVE-2023-38709 (now CVE-2024-42516), privilege escalation through .htaccess file manipulation (CVE-2026-24072), timing attacks bypassing digest authentication (CVE-2026-33006), NULL pointer dereference (CVE-2026-29169), heap-based buffer overflows via malicious backend servers and untrusted content (CVE-2026-34356, CVE-2026-42536), buffer over-read via OCSP requests (CVE-2026-44185), denial of service through crafted regular expressions and path handling issues (CVE-2026-44631, CVE-2026-42535), buffer overflow allowing security bypass (CVE-2026-34355), out-of-bounds reads (CVE-2026-43951), and local .htaccess authors reading files with httpd user privileges (CVE-2026-44119). These vulnerabilities impact the Insights proxy container used for routing Red Hat Insights traffic in disconnected or air-gapped environments. The advisory provides updated packages for affected Red Hat Enterprise Linux versions and related components.

Detailed information about Red Hat Security Advisory: httpd security, bug fix, and enhancement update affecting Red Hat Product Security Red Hat. Get real-time 

Red Hat Security Advisory: httpd security, bug fix, and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:41906

https://access.redhat.com/security/updates/classification/#important

2374549

2464941

2465293

2465296

2486395

2486397

2486399

2486402

2486406

2486411

2486414

2486415

2486416

Canonical URL

https://access.redhat.com/errata/RHSA-2026:34109

https://access.redhat.com/errata/RHSA-2026:42828

https://access.redhat.com/errata/RHSA-2026:47046

2464940

2464952

2464953

2465299

2466913

https://access.redhat.com/errata/RHSA-2026:53371

https://access.redhat.com/security/cve/CVE-2024-42516

https://access.redhat.com/security/cve/CVE-2025-6170

https://access.redhat.com/security/cve/CVE-2026-10879

https://access.redhat.com/security/cve/CVE-2026-13757

https://access.redhat.com/security/cve/CVE-2026-14380

https://access.redhat.com/security/cve/CVE-2026-14739

https://access.redhat.com/security/cve/CVE-2026-24072

https://access.redhat.com/security/cve/CVE-2026-29169

https://access.redhat.com/security/cve/CVE-2026-33006

https://access.redhat.com/security/cve/CVE-2026-34355

https://access.redhat.com/security/cve/CVE-2026-34356

https://access.redhat.com/security/cve/CVE-2026-41989

https://access.redhat.com/security/cve/CVE-2026-42535

https://access.redhat.com/security/cve/CVE-2026-42536

https://access.redhat.com/security/cve/CVE-2026-43951

https://access.redhat.com/security/cve/CVE-2026-44119

https://access.redhat.com/security/cve/CVE-2026-44185

https://access.redhat.com/security/cve/CVE-2026-44186

https://access.redhat.com/security/cve/CVE-2026-44631

https://access.redhat.com/errata/RHSA-2026:56868

https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_5_release_notes/index

2374553

2486394

2486405

2486419

JBCS-2284

JBCS-2285

https://access.redhat.com/errata/RHSA-2026:56869

2496756

2496759

https://access.redhat.com/errata/RHSA-2026:62165

https://access.redhat.com/errata/RHSA-2026:66323

https://access.redhat.com/errata/RHSA-2026:67152

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2024-42516 page

SUSE CVE CVE-2024-43204 page

SUSE CVE CVE-2024-47252 page

SUSE CVE CVE-2025-23048 page

SUSE CVE CVE-2025-49630 page

SUSE CVE CVE-2025-49812 page

SUSE CVE CVE-2025-53020 page

SUSE CVE CVE-2025-55753 page

SUSE CVE CVE-2025-58098 page

SUSE CVE CVE-2025-59775 page

SUSE CVE CVE-2025-65082 page

SUSE CVE CVE-2025-66200 page

URL for RHSA-2026:42828

E-Mail link for RHSA-2026:42828

SUSE CVE CVE-2026-29169 page

SUSE CVE CVE-2026-34355 page

SUSE CVE CVE-2026-34356 page

SUSE CVE CVE-2026-42536 page

SUSE CVE CVE-2026-43951 page

SUSE CVE CVE-2026-44185 page

SUSE CVE CVE-2026-44186 page

SUSE CVE CVE-2026-44631 page

URL for RHSA-2026:62165

E-Mail link for RHSA-2026:62165

SUSE CVE CVE-2026-28780 page

SUSE CVE CVE-2026-29167 page

SUSE CVE CVE-2026-33007 page

SUSE CVE CVE-2026-33857 page

SUSE CVE CVE-2026-34032 page

SUSE CVE CVE-2026-34059 page

Red Hat Security Advisory: Insights proxy Container Image

httpd

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.

CVE-2024-43204 is a Server-Side Request Forgery (SSRF) vulnerability identified in the Apache HTTP Server maintained by the Apache Software Foundation. The vulnerability arises when the mod_proxy module is loaded and the mod_headers module is configured to modify the Content-Type HTTP request or response header using values derived from incoming HTTP requests. This configuration is uncommon but possible in certain custom setups. SSRF vulnerabilities allow attackers to coerce the server into making HTTP requests to arbitrary URLs, including internal or protected network resources that are otherwise inaccessible externally. In this case, an attacker can send crafted requests that cause the server to proxy outbound requests to attacker-controlled URLs, potentially bypassing network restrictions and accessing internal services. The vulnerability affects all Apache HTTP Server versions starting from 2.4.0 up to but not including 2.4.64, where the issue has been fixed. The attack vector is network-based, requires no privileges or user interaction, and impacts the integrity of the server's request handling by enabling unauthorized request redirection. Although no active exploitation has been reported, the potential for SSRF to facilitate further attacks such as internal reconnaissance, data manipulation, or pivoting makes this a significant risk. The CVSS v3.1 score of 7.5 reflects a high severity rating, primarily due to the ease of exploitation and the potential impact on system integrity. The recommended mitigation is upgrading to Apache HTTP Server version 2.4.64, which contains the necessary patches to eliminate this vulnerability.

Detailed information about CVE-2024-43204: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache HTTP Server affecting Apache Software

CVE-2024-43204: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache HTTP Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-43204: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache HTTP Server


Red Hat Security Advisory: Insights proxy Container ImageCVE-2024-42516 0 This security update provides a functional equivalent of RHSA-2026:42828. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:42828. HighVulnerability#gcve #csaf #cve-2024-42516 Join the discussion	GCVE Database	08/11/2026, 09:08:05 UTC Added: 07/08/2026, 13:21:09 UTC
CVE-2024-43204: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache HTTP ServerCVE-2024-43204 0 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue. HighVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2024-43204 #cwe-918 Join the discussion	CVE Database V5	07/10/2025, 16:54:15 UTC Added: 11/03/2025, 19:53:51 UTC

Threats Tagged 'cve-2024-43204'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-43204'

Lead Pen Test Professional