Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 3.3.3 provides these changes:

CVE-2025-6242 is a vulnerability in the node-forge library used by Red Hat OpenShift AI and other Red Hat products. It involves an interpretation conflict in ASN.1 structure parsing that allows unauthenticated attackers to bypass downstream cryptographic verification and security decisions by crafting malicious ASN.1 data. This leads to semantic divergence in schema validation. The vulnerability is rated important by Red Hat with a CVSS v3 base score of 8.7 (Red Hat rating). It affects cryptographic integrity and confidentiality but does not impact availability. Red Hat has not provided a patch or mitigation that meets their standards for deployment and stability. Updated Red Hat OpenShift AI images (3.3.3) are available, but no direct fix for this CVE is included. Red Hat continues to investigate and may provide fixes in future updates.

Detailed information about Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:19712

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-59057

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-62164

https://access.redhat.com/security/cve/CVE-2025-6242

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66448

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-69223

https://access.redhat.com/security/cve/CVE-2025-69873

https://access.redhat.com/security/cve/CVE-2026-0846

https://access.redhat.com/security/cve/CVE-2026-0847

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/errata/RHSA-2026:10184

https://access.redhat.com/security/cve/CVE-2025-11157

https://access.redhat.com/security/cve/CVE-2025-12103

https://access.redhat.com/security/cve/CVE-2025-14009

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-68131

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2025-69534

https://access.redhat.com/security/cve/CVE-2026-1002

https://access.redhat.com/security/cve/CVE-2026-22773

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI

Release of RHOAI 3.0 provides these changes:

A privilege assignment flaw (CWE-266) exists in Red Hat OpenShift AI 3.0's TrustyAI component. It creates a role and cluster role binding that grants all authenticated users and service accounts permissions to get, list, and watch pods across all namespaces, and access persistent volume claims and lmevaljobs. This is implemented by binding the role to the system:authenticated group, effectively allowing any user or service account on the cluster to enumerate pods and access certain resources cluster-wide. Red Hat rates this vulnerability as moderate severity due to the limited scope of information exposure. No official fix or patch is currently available, and mitigation options are either unavailable or insufficient per Red Hat Product Security standards.

Detailed information about Red Hat Security Advisory: RHOAI 3.0 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, techni

Red Hat Security Advisory: RHOAI 3.0 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:21117

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_openshift_ai/

Canonical URL

Red Hat Security Advisory: RHOAI 3.0 - Red Hat OpenShift AI

openshift-ai

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to  get, list, watch any pod in any namespace on the cluster.

TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster 

Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`

The vulnerability in Red Hat OpenShift AI 2.25 involves the TrustyAI component creating a role named 'trustyai-service-operator-lmeval-user-role' and a cluster role binding 'trustyai-service-operator-default-lmeval-user-rolebinding' that is applied to the 'system:authenticated' group. This configuration grants every user and service account on the cluster permissions to get, list, and watch pods across all namespaces, as well as access to persistent volume claims and lmevaljobs. This incorrect privilege assignment expands access rights cluster-wide beyond what is typically allowed for authenticated users.

Detailed information about CVE-2025-12103: Incorrect Privilege Assignment in Red Hat Red Hat OpenShift AI (RHOAI) affecting Red Hat Red Hat OpenShift AI (RHOAI)

CVE-2025-12103: Incorrect Privilege Assignment in Red Hat Red Hat OpenShift AI (RHOAI) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12103: Incorrect Privilege Assignment in Red Hat Red Hat OpenShift AI 2.25


Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AICVE-2025-6242 0 Release of RHOAI 3.3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2025-6242 Join the discussion	GCVE Database	05/20/2026, 15:49:06 UTC Added: 05/26/2026, 20:57:56 UTC
Red Hat Security Advisory: RHOAI 3.0 - Red Hat OpenShift AICVE-2025-12103 0 Release of RHOAI 3.0 provides these changes: MediumVulnerability#gcve #csaf #cve-2025-12103 Join the discussion	GCVE Database	11/12/2025, 10:03:26 UTC Added: 07/19/2026, 03:41:44 UTC
CVE-2025-12103: Incorrect Privilege Assignment in Red Hat Red Hat OpenShift AI 2.25CVE-2025-12103 0 A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster Additionally users can access all `persistentvolumeclaims` and `lmevaljobs` MediumVulnerability#cve #cve-2025-12103 Join the discussion	CVE Database V5	10/28/2025, 13:31:59 UTC Added: 10/28/2025, 13:42:02 UTC

Threats Tagged 'cve-2025-12103'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12103'

Lead Pen Test Professional