Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update.

CVE-2024-5042 is a flaw in the Submariner operator component of Red Hat Advanced Cluster Management for Kubernetes. Due to unnecessary and overly broad RBAC permissions, a privileged attacker can create, patch, or update statefulsets or replicasets, enabling the deployment of privileged containers that can escape confinement and gain root privileges on worker nodes. This can allow the attacker to steal service account tokens and compromise other nodes within the cluster, potentially leading to full cluster compromise. The vulnerability is tracked under CWEs 250, 20, 125, and 770, indicating issues with execution with unnecessary privileges, improper input validation, out-of-bounds read, and use of potentially dangerous functions. Red Hat has issued a security advisory (RHSA-2026:6503) including this fix in OpenShift Data Foundation 4.20.9. The CVSS v3.1 base score assigned by Red Hat is 6.6 (High), reflecting network attack vector, high attack complexity and privileges required, no user interaction, changed scope, low confidentiality impact, high integrity impact, and no availability impact.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update affecting Red Hat Product 

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:6503

https://access.redhat.com/security/cve/CVE-2024-5042

https://access.redhat.com/security/cve/CVE-2025-22870

https://access.redhat.com/security/cve/CVE-2025-47913

https://access.redhat.com/security/cve/CVE-2025-47914

https://access.redhat.com/security/cve/CVE-2025-58181

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/

Canonical URL

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update

submariner

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.

The vulnerability CVE-2024-5042 in the Submariner project arises from unnecessary RBAC permissions that grant excessive privileges. A privileged attacker can exploit this to execute a malicious container on a node, which may lead to theft of service account tokens and compromise of additional nodes within the cluster. The CVSS 3.1 vector is AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N, reflecting network attack vector, high attack complexity, high privileges required, no user interaction, scope change, low confidentiality impact, high integrity impact, and no availability impact. Red Hat OpenShift Data Foundation has released security updates that include fixes for this vulnerability.

Detailed information about CVE-2024-5042: Execution with Unnecessary Privileges. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-5042: Execution with Unnecessary Privileges - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-5042: Execution with Unnecessary Privileges


Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix updateCVE-2024-5042 0 Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update. HighVulnerability#gcve #csaf #cve-2024-5042 Join the discussion	GCVE Database	04/02/2026, 16:38:29 UTC Added: 05/28/2026, 20:54:07 UTC
CVE-2024-5042: Execution with Unnecessary PrivilegesCVE-2024-5042 0 A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster. MediumVulnerability#cve #cve-2024-5042 Join the discussion	CVE Database V5	05/17/2024, 13:12:00 UTC Added: 11/11/2025, 16:06:55 UTC

Threats Tagged 'cve-2024-5042'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-5042'

Lead Pen Test Professional