Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.

CVE-2025-12548 is a critical security vulnerability discovered in Red Hat OpenShift Dev Spaces (RHOSDS) version 3.22, specifically affecting the Eclipse Che che-machine-exec component. The vulnerability stems from a missing authentication mechanism on a JSON-RPC / websocket API endpoint exposed on TCP port 3333. This API allows remote attackers to interact with Developer Workspace containers without any authentication, enabling them to execute arbitrary commands remotely. Furthermore, attackers can exfiltrate sensitive secrets such as SSH keys, tokens, and other credentials stored within other users' containers. The vulnerability affects multi-tenant environments where multiple developers share the same OpenShift Dev Spaces infrastructure, potentially allowing one compromised container to impact others. The CVSS v3.1 base score is 9.0 (critical), reflecting the high impact on confidentiality, integrity, and availability, combined with the ease of exploitation due to no authentication and network accessibility. The vulnerability was publicly disclosed on January 13, 2026, with no known exploits in the wild at the time of publication. The flaw requires network access to the exposed port but does not require user interaction or prior authentication, making it highly exploitable in exposed deployments. The vulnerability highlights the risks of exposing internal APIs without proper access controls in containerized developer environments.

Detailed information about CVE-2025-12548: Missing Authentication for Critical Function in Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 affecting Red Hat 

CVE-2025-12548: Missing Authentication for Critical Function in Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12548: Missing Authentication for Critical Function in Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22

This release addresses CVE-2025-12548 'Eclipse Che — unauthenticated RCE and secret exfiltration via TCP/3333'.

The vulnerability CVE-2025-12548 affects Eclipse Che's che-machine-exec component integrated in Red Hat OpenShift Dev Spaces. It permits unauthenticated remote code execution and secret exfiltration by exploiting an unauthenticated JSON-RPC/websocket API on TCP port 3333. This flaw allows attackers to run arbitrary commands and access sensitive data from other users' Developer Workspace containers. Red Hat has released OpenShift Dev Spaces 3.23.1 to remediate this issue. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function).

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.22.1 Release. affecting Red Hat Product Security Red Hat. Get real-time upd

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.22.1 Release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:22652

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.23/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-12548

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2025:22623

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.24/html/administration_guide/installing-devspaces

https://access.redhat.com/errata/RHSA-2025:22620

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.22/html/administration_guide/installing-devspaces

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.22.1 Release.


CVE-2025-12548: Missing Authentication for Critical Function in Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22CVE-2025-12548 0 A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+8#cve #cve-2025-12548 Join the discussion	CVE Database V5	01/13/2026, 15:35:01 UTC Added: 01/13/2026, 15:41:39 UTC
Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.22.1 Release.CVE-2025-12548 0 This release addresses CVE-2025-12548 'Eclipse Che — unauthenticated RCE and secret exfiltration via TCP/3333'. HighVulnerability#gcve #csaf #cve-2025-12548 Join the discussion	GCVE Database	12/02/2025, 15:22:33 UTC Added: 07/19/2026, 03:41:44 UTC

Threats Tagged 'cve-2025-12548'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12548'

Lead Pen Test Professional