Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CVE-2026-3731 is an out-of-bounds read vulnerability in libssh's SFTP extension name handler functions sftp_extensions_get_name and sftp_extensions_get_data. By manipulating the index argument, a remote attacker can cause the application to read memory outside the intended buffer, potentially leading to denial of service or information disclosure. This vulnerability affects Red Hat Enterprise Linux versions that include libssh. The Red Hat advisory RHSA-2026:7067 covers this and related CVEs but currently does not provide a fix or effective mitigation. The vulnerability is classified under CWE-125 (Out-of-bounds Read) and has a moderate impact rating by Red Hat. No known exploits in the wild have been reported.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7067

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-3731

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-0966

https://access.redhat.com/security/cve/CVE-2025-14821

Canonical URL

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details.

CVE-2025-13151 is a stack-based buffer overflow vulnerability in the libtasn1 library, specifically in the asn1_expend_octet_string function. The issue arises from a failure to properly validate the size of input data, allowing a remote attacker to trigger a denial of service by crashing applications that use libtasn1. Red Hat has classified this vulnerability as low severity and notes that no suitable mitigation or fix currently meets their standards for deployment. The vulnerability affects Red Hat Hardened Images RPMs including libtasn1 versions 4.21.0-1.1.hum1 for aarch64 and x86_64 architectures.

Detailed information about Red Hat Security Advisory: libtasn1 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical deta

Red Hat Security Advisory: libtasn1 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7500

https://access.redhat.com/security/cve/CVE-2025-13151

Reference

https://access.redhat.com/errata/RHSA-2026:28235

https://access.redhat.com/security/updates/classification/#low

2427698

https://access.redhat.com/errata/RHSA-2026:28253

https://access.redhat.com/errata/RHSA-2026:36728

Apache zookeeper: In libexpat before 2 (CVE-2025-13151)

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.

This vulnerability arises from libssh's insecure default behavior on Windows platforms, where configuration files are automatically loaded from the C:\etc directory. Because this directory can be created and modified by unprivileged local users, attackers can manipulate trusted host information, leading to local man-in-the-middle attacks and security downgrades of SSH connections. The issue affects Red Hat Hardened Images that include this libssh configuration. The Red Hat advisory linked does not currently provide explicit patch or fix information for this vulnerability.

Detailed information about CVE-2025-14821: Uncontrolled Search Path Element in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat Enterprise Linux 10

CVE-2025-14821: Uncontrolled Search Path Element in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14821: Uncontrolled Search Path Element in Red Hat Red Hat Hardened Images


Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-14821 0 This update includes the following RPMs: MediumVulnerability#gcve #csaf #cve-2025-14821 Join the discussion	GCVE Database	04/08/2026, 13:23:35 UTC Added: 06/27/2026, 22:08:16 UTC
Apache zookeeper: In libexpat before 2 (CVE-2025-13151)CVE-2025-13151 0 Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details. CriticalVulnerability#gcve #csaf #cve-2025-13151 Join the discussion	GCVE Database	04/08/2026, 00:39:48 UTC Added: 06/24/2026, 00:43:41 UTC
CVE-2025-14821: Uncontrolled Search Path Element in Red Hat Red Hat Hardened ImagesCVE-2025-14821 0 A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users. HighVulnerability#cve #cve-2025-14821 Join the discussion	CVE Database V5	04/07/2026, 16:34:10 UTC Added: 04/07/2026, 16:46:29 UTC

Threats Tagged 'cve-2025-14821'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14821'

Lead Pen Test Professional