Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The 1.20. release of Red Hat OpenShift Pipelines Operator.

This advisory covers the 1.20.3 release of Red Hat OpenShift Pipelines Operator which addresses several security issues including CVE-2025-11621. The primary vulnerability described is an authentication bypass in Hashicorp Vault's AWS Auth method due to mishandling of cached AWS client entries when the bound_principal_iam role is the same across AWS accounts or uses a wildcard. This can allow an attacker to bypass authentication controls. The advisory lists six CVEs in total but does not provide detailed technical descriptions for the others. No official patch or fix is currently available for these vulnerabilities as per the vendor advisory. Red Hat scores the severity as high and notes that mitigation options are either unavailable or insufficient by their standards.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3 affecting Red Hat Product Security Red Hat. Get real-time updat

Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:3827

https://access.redhat.com/security/cve/CVE-2025-11621

https://access.redhat.com/security/cve/CVE-2025-12044

https://access.redhat.com/security/cve/CVE-2025-47913

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-66506

https://access.redhat.com/security/cve/CVE-2025-66564

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines

Canonical URL

https://access.redhat.com/errata/RHSA-2025:21984

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index

https://access.redhat.com/errata/RHSA-2025:21988

https://access.redhat.com/errata/RHSA-2025:21976

https://access.redhat.com/errata/RHSA-2025:21981

https://access.redhat.com/errata/RHSA-2025:22058

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer

Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3

vault

Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5, 1.19.11, and 1.16.27

CVE-2025-11621 is a vulnerability classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel) affecting HashiCorp Vault's AWS Auth method. Vault allows authentication via AWS IAM roles, where the bound_principal_iam parameter restricts which IAM roles can authenticate. If this parameter is configured with the same IAM role across multiple AWS accounts or uses a wildcard, an attacker can exploit this to bypass authentication controls. This bypass occurs because Vault cannot distinguish between roles from different accounts or overly permissive role specifications, allowing an attacker with low privileges in one AWS account to impersonate a trusted role in Vault. The vulnerability affects Vault versions starting from 0.6.0 up to versions prior to the patched releases: Community Edition 1.21.0 and Enterprise Editions 1.21.0, 1.20.5, 1.19.11, and 1.16.27. The CVSS v3.1 base score is 8.1, indicating high severity, with attack vector as network, low attack complexity, requiring privileges but no user interaction, and resulting in high confidentiality and integrity impact without affecting availability. No public exploits are known yet, but the vulnerability poses a significant risk due to the sensitive nature of Vault's secret management. The flaw highlights the importance of precise IAM role configurations and the risks of wildcard or duplicated roles across AWS accounts. HashiCorp has addressed the issue in the specified patched versions.

Detailed information about CVE-2025-11621: CWE-288: Authentication Bypass Using an Alternate Path or Channel in HashiCorp Vault affecting HashiCorp Vault. Get r

CVE-2025-11621: CWE-288: Authentication Bypass Using an Alternate Path or Channel in HashiCorp Vault - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11621: CWE-288: Authentication Bypass Using an Alternate Path or Channel in HashiCorp Vault


Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3CVE-2025-11621 0 The 1.20. release of Red Hat OpenShift Pipelines Operator. HighVulnerability#gcve #csaf #cve-2025-11621 Join the discussion	GCVE Database	03/05/2026, 07:31:32 UTC Added: 05/26/2026, 20:58:16 UTC
CVE-2025-11621: CWE-288: Authentication Bypass Using an Alternate Path or Channel in HashiCorp VaultCVE-2025-11621 0 Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5, 1.19.11, and 1.16.27 HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-11621 #cwe-288 Join the discussion	CVE Database V5	10/23/2025, 19:08:54 UTC Added: 10/23/2025, 19:15:31 UTC

Threats Tagged 'cve-2025-11621'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11621'

Lead Pen Test Professional