Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This update includes the following RPMs:

haproxy:
  * haproxy-3.0.19-1.hum1 (aarch64, x86_64)
  * haproxy-3.0.19-1.hum1.src (src)

CVE-2025-11230 is a vulnerability in haproxy stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. When haproxy is configured to analyze JSON content (e.g., using json_query or jwt_payload_query functions), this flaw can be exploited to cause denial of service through excessive CPU, memory, or other resource consumption. Red Hat Product Security has assigned a high severity rating and a CVSS 3.1 base score of 7.5 for their product context. The vulnerability is tracked under Red Hat Advisory RHSA-2026:8729. Currently, no mitigation meeting Red Hat's criteria is available, and a fix has not been released. The advisory notes that mitigation options either do not exist or are not practical for widespread deployment or stability.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:8729

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-11230

https://access.redhat.com/security/updates/classification/

Canonical URL

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

The Insights proxy Container is used by the Insights proxy product RPM
and serves as an intermediary between cystomer systems in disconnected networks,
air-gapped systems or systems with no outside connections and Insights.

The Insights proxy routes all Red Hat Insights traffic through itself, providing
a layer of privary and security for disconnected customer systems.

The Red Hat Security Advisory RHSA-2025:22868 covers vulnerabilities including CVE-2024-56433 in shadow-utils, which sets default subordinate user ID ranges in /etc/login.defs that may overlap with user IDs on local networks. This misconfiguration can lead to potential account takeover by exploiting newuidmap for access to NFS home directories or same-host resources during remote logins. The advisory also references multiple other CVEs affecting Red Hat Ceph Storage and the Insights proxy container image. Red Hat has not explicitly stated a patch availability in the advisory content provided. The CVSS score for CVE-2024-56433 is 3.6 (low) per Red Hat, but the overall severity is marked as high due to the combined impact of multiple vulnerabilities.

Detailed information about Red Hat Security Advisory: Insights proxy Container Image affecting Red Hat Product Security Red Hat. Get real-time updates, technica

Red Hat Security Advisory: Insights proxy Container Image - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:22868

https://access.redhat.com/security/cve/CVE-2024-56433

https://access.redhat.com/security/cve/CVE-2025-4598

https://access.redhat.com/security/cve/CVE-2025-53905

https://access.redhat.com/security/cve/CVE-2025-53906

https://access.redhat.com/security/cve/CVE-2025-6965

https://access.redhat.com/security/cve/CVE-2025-9230

https://access.redhat.com/security/cve/CVE-2025-9714

https://access.redhat.com/errata/RHSA-2025:22548

https://access.redhat.com/security/cve/cve-2024-56433

https://access.redhat.com/security/cve/cve-2025-9230

https://access.redhat.com/security/cve/cve-2025-6965

https://access.redhat.com/security/cve/cve-2025-11561

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/

Red Hat Security Advisory: Insights proxy Container Image

haproxy

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

CVE-2025-11230 is a vulnerability categorized under CWE-407 (Inefficient Algorithmic Complexity) found in the mjson component of HAProxy Community Edition versions 2.4.0 through 3.2.0. The flaw arises because the JSON parsing algorithm used by HAProxy does not efficiently handle certain crafted JSON inputs, leading to excessive computational resource consumption. This inefficiency can be exploited remotely by attackers who send specially crafted JSON requests to HAProxy instances exposed to the network. The result is a denial of service (DoS) condition where the HAProxy process becomes overwhelmed, potentially leading to service unavailability. The vulnerability does not affect confidentiality or integrity, as it does not allow data leakage or unauthorized data modification. No authentication or user interaction is required, making exploitation straightforward for any attacker with network access to the HAProxy service. The CVSS v3.1 base score of 7.5 reflects a high severity due to network attack vector, low complexity, no privileges required, and a significant impact on availability. Currently, there are no publicly known exploits in the wild, and no patches have been linked yet, indicating that organizations must rely on mitigations until official fixes are released. HAProxy is widely used in European enterprises and service providers for load balancing and proxying HTTP/HTTPS traffic, making this vulnerability particularly relevant for critical infrastructure and high-availability environments.

Detailed information about CVE-2025-11230: CWE-407 Inefficient Algorithmic Complexity in HAProxy Technologies HAProxy Community Edition affecting HAProxy Techno

CVE-2025-11230: CWE-407 Inefficient Algorithmic Complexity in HAProxy Technologies HAProxy Community Edition - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11230: CWE-407 Inefficient Algorithmic Complexity in HAProxy Technologies HAProxy Community Edition


Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-11230 0 This update includes the following RPMs: haproxy: * haproxy-3.0.19-1.hum1 (aarch64, x86_64) * haproxy-3.0.19-1.hum1.src (src) HighVulnerability#gcve #csaf #cve-2025-11230 Join the discussion	GCVE Database	04/17/2026, 04:59:45 UTC Added: 06/27/2026, 22:08:20 UTC
Red Hat Security Advisory: Insights proxy Container ImageCVE-2024-56433 0 The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes all Red Hat Insights traffic through itself, providing a layer of privary and security for disconnected customer systems. HighVulnerability#gcve #csaf #cve-2024-56433 Join the discussion	GCVE Database	12/08/2025, 18:05:34 UTC Added: 05/28/2026, 22:15:03 UTC
CVE-2025-11230: CWE-407 Inefficient Algorithmic Complexity in HAProxy Technologies HAProxy Community EditionCVE-2025-11230 1 Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests. HighVulnerabilityGermanyFranceNetherlands+3#cve #cve-2025-11230 #cwe-407 Join the discussion	CVE Database V5	11/19/2025, 09:28:39 UTC Added: 11/19/2025, 09:41:32 UTC

Threats Tagged 'cve-2025-11230'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11230'

Lead Pen Test Professional