Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cpython

CPython

When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.

CVE-2025-11468 is a vulnerability identified in the Python Software Foundation's CPython interpreter, specifically affecting versions 0 through 3.15.0a1. The issue arises during the folding of long comments in email headers that contain only unfoldable characters. In such cases, the parentheses that should be preserved in the header folding process are lost, leading to malformed headers. This parsing flaw can be exploited to inject additional headers into email messages when the email addresses involved are user-controlled and lack proper sanitization. The vulnerability is categorized under CWE-93, indicating improper neutralization of CRLF sequences, which is a common vector for header injection attacks. The attack vector is network-based (AV:N), with low attack complexity (AC:L), but requires privileged access (PR:H) and user interaction (UI:P). The impact includes potential violation of email integrity and confidentiality by manipulating headers, which could facilitate phishing, spoofing, or other malicious email-based attacks. No known exploits have been reported in the wild as of the publication date. The vulnerability does not affect confidentiality directly but impacts integrity and availability of email communications. The CVSS 4.0 score of 5.7 reflects a medium severity level, balancing the ease of exploitation with the required privileges and user interaction. The vulnerability is relevant to any organization using CPython for email handling, especially those processing user-supplied email addresses without strict validation.

Detailed information about CVE-2025-11468: Vulnerability in Python Software Foundation CPython affecting Python Software Foundation CPython. Get real-time updat

CVE-2025-11468: Vulnerability in Python Software Foundation CPython - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11468: Vulnerability in Python Software Foundation CPython

python

If the value passed to os.path.expandvars() is user-controlled a 
performance degradation is possible when expanding environment 
variables.

The advisory details multiple security flaws in Python 3.12 and related components as shipped by Red Hat, including CVE-2025-6075 which involves quadratic complexity in os.path.expandvars() when processing user-controlled templates, potentially leading to resource exhaustion. Other issues include out-of-memory conditions when loading Plist files (CVE-2025-13837), header injection via newlines in data URL mediatype and http.cookies.Morsel, logging bypass in legacy .pyc file handling, incomplete control character validation in http.cookies, and stack overflow parsing XML. These vulnerabilities affect various Red Hat Enterprise Linux versions and related container images. Red Hat has updated the affected components and container images, recommending deployment via the rhui-installer utility. The advisory includes a comprehensive list of CVEs and CWE identifiers related to resource exhaustion, injection, and memory corruption issues.

Detailed information about Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update affecting Red Hat Product Security Red Hat. Get real-tim

Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:21275

https://access.redhat.com/products/red-hat-update-infrastructure

https://access.redhat.com/security/cve/CVE-2025-13837

https://access.redhat.com/security/cve/CVE-2025-14087

https://access.redhat.com/security/cve/CVE-2025-14512

https://access.redhat.com/security/cve/CVE-2025-15282

https://access.redhat.com/security/cve/CVE-2025-59375

https://access.redhat.com/security/cve/CVE-2025-6075

https://access.redhat.com/security/cve/CVE-2026-0672

https://access.redhat.com/security/cve/CVE-2026-0865

https://access.redhat.com/security/cve/CVE-2026-1502

https://access.redhat.com/security/cve/CVE-2026-2100

https://access.redhat.com/security/cve/CVE-2026-2297

https://access.redhat.com/security/cve/CVE-2026-29111

https://access.redhat.com/security/cve/CVE-2026-31790

https://access.redhat.com/security/cve/CVE-2026-34982

https://access.redhat.com/security/cve/CVE-2026-35385

https://access.redhat.com/security/cve/CVE-2026-35386

https://access.redhat.com/security/cve/CVE-2026-35387

https://access.redhat.com/security/cve/CVE-2026-35388

https://access.redhat.com/errata/RHSA-2026:7443

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-5713

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-4224

https://access.redhat.com/security/cve/CVE-2026-3644

https://access.redhat.com/security/cve/CVE-2026-1299

https://access.redhat.com/security/cve/CVE-2025-13836

https://access.redhat.com/security/cve/CVE-2025-13462

https://access.redhat.com/security/cve/CVE-2025-11468

https://access.redhat.com/security/cve/CVE-2025-8291

https://access.redhat.com/security/cve/CVE-2025-12084

https://access.redhat.com/security/cve/CVE-2026-3446

https://access.redhat.com/security/cve/CVE-2026-3479

https://access.redhat.com/security/cve/CVE-2026-4519

https://access.redhat.com/errata/RHSA-2026:10950

https://access.redhat.com/security/updates/classification/#important

2395108

2408891

2418084

2431366

2431374

2444691

2448168

2448181

2457409

2457932

2458049

Canonical URL

https://access.redhat.com/errata/RHSA-2026:19064

2449649

https://access.redhat.com/errata/RHSA-2026:8824

https://access.redhat.com/security/cve/CVE-2025-15367

https://access.redhat.com/security/cve/CVE-2026-4786

https://access.redhat.com/security/cve/CVE-2026-6100

https://access.redhat.com/errata/RHSA-2026:19177

https://access.redhat.com/errata/RHSA-2026:7661

https://access.redhat.com/errata/RHSA-2026:8822

https://access.redhat.com/security/cve/CVE-2025-15366

Python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


CVE-2025-11468: Vulnerability in Python Software Foundation CPythonCVE-2025-11468 0 When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-11468 Join the discussion	CVE Database V5	01/20/2026, 21:09:11 UTC Added: 01/20/2026, 21:20:56 UTC
Python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)CVE-2025-6075 0 If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables. MediumVulnerability#gcve #csaf #cve-2025-6075 Join the discussion	GCVE Database	12/05/2025, 11:13:34 UTC Added: 05/27/2026, 21:15:15 UTC

Threats Tagged 'cve-2025-11468'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11468'

Lead Pen Test Professional