Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A low severity vulnerability (CVE-2024-6126) in Cockpit, a web-based server administration tool for GNU/Linux, allows an authenticated user to kill any process when the pam_env module's user_readenv option is enabled. This issue affects Red Hat Enterprise Linux 9 and related variants. A security update addressing this vulnerability has been released by Red Hat as part of the Red Hat Enterprise Linux 9.5 update.

The vulnerability CVE-2024-6126 in Cockpit enables an authenticated user to kill any process if the pam_env's user_readenv option is enabled. Cockpit is a web-based interface for administering GNU/Linux servers, providing features such as network configuration and command-line sessions. Red Hat has issued a security advisory (RHSA-2024:9325) with an update that fixes this issue in Red Hat Enterprise Linux 9 and its variants. The advisory rates the impact as low severity and provides updated packages to remediate the vulnerability.

Detailed information about Red Hat Security Advisory: cockpit security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detai

Red Hat Security Advisory: cockpit security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:9325

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index

https://access.redhat.com/security/updates/classification/#low

2292897

RHEL-34216

RHEL-46354

RHEL-55860

Canonical URL

Red Hat Security Advisory: cockpit security update

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

CVE-2024-6126 is a security vulnerability identified in the cockpit package, a web-based server management interface commonly used on Linux systems. The flaw arises when the pam_env module's user_readenv option is enabled, which allows an authenticated user to kill arbitrary processes on the system. This behavior leads to uncontrolled resource consumption and ultimately a denial of service (DoS) condition, impacting system availability. The vulnerability requires the attacker to be authenticated with low privileges and to perform user interaction, such as triggering the environment reading process. The CVSS 3.1 base score is 3.2, indicating a low severity level, with an attack vector of local access (AV:L), low attack complexity (AC:L), requiring privileges (PR:L), and user interaction (UI:R). The scope is changed (S:C), but the impact is limited to availability (A:L) with no confidentiality or integrity impact. No known exploits have been reported in the wild as of the publication date. The vulnerability is particularly relevant for environments where cockpit is used with pam_env's user_readenv enabled, which is not a default configuration in many distributions. The flaw was assigned by Red Hat and published in early July 2024. Organizations using cockpit should monitor for patches and advisories from their Linux distribution vendors.

Detailed information about CVE-2024-6126: Uncontrolled Resource Consumption. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-6126: Uncontrolled Resource Consumption - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-6126: Uncontrolled Resource Consumption


Red Hat Security Advisory: cockpit security updateCVE-2024-6126 0 A low severity vulnerability (CVE-2024-6126) in Cockpit, a web-based server administration tool for GNU/Linux, allows an authenticated user to kill any process when the pam_env module's user_readenv option is enabled. This issue affects Red Hat Enterprise Linux 9 and related variants. A security update addressing this vulnerability has been released by Red Hat as part of the Red Hat Enterprise Linux 9.5 update. LowVulnerability#gcve #csaf #cve-2024-6126 Join the discussion	GCVE Database	11/12/2024, 09:27:38 UTC Added: 06/02/2026, 21:44:03 UTC
CVE-2024-6126: Uncontrolled Resource ConsumptionCVE-2024-6126 0 A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack. LowVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2024-6126 Join the discussion	CVE Database V5	07/03/2024, 14:51:17 UTC Added: 11/21/2025, 07:17:38 UTC

Threats Tagged 'cve-2024-6126'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-6126'

Lead Pen Test Professional