Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat has released a security update for its build of Quarkus 3.27.2 addressing four vulnerabilities: a timing attack in SCRAM authentication, a denial of service due to connection leaks in Hibernate Reactive, HTTP request smuggling via CRLF injection in Netty codec HTTP, and a worker thread exhaustion vulnerability in Quarkus REST. These issues have been rated with moderate severity by Red Hat. The update is intended to fix these vulnerabilities and improve overall stability and security of the product.

The Red Hat build of Quarkus 3.27.2 release includes fixes for four specific vulnerabilities: CVE-2025-59432 (timing attack in SCRAM authentication), CVE-2025-14969 (denial of service caused by connection leaks on HTTP client disconnect in Hibernate Reactive), CVE-2025-67735 (HTTP request smuggling via CRLF injection in Netty codec HTTP), and CVE-2025-66560 (worker thread exhaustion vulnerability in Quarkus REST). These vulnerabilities affect components within the Quarkus runtime and related libraries. The advisory indicates that the update addresses these issues and recommends applying the update after ensuring prior errata are applied.

Detailed information about Red Hat Security Advisory: Red Hat build of Quarkus 3.27.2 release and security update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat build of Quarkus 3.27.2 release and security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:1965

https://access.redhat.com/security/updates/classification/#moderate

https://access.redhat.com/products/quarkus/

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.27.2

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.27

QUARKUS-6243

QUARKUS-6552

QUARKUS-6553

QUARKUS-6564

QUARKUS-6715

QUARKUS-6792

QUARKUS-7028

QUARKUS-7060

QUARKUS-7061

QUARKUS-7062

QUARKUS-7063

QUARKUS-7064

QUARKUS-7065

QUARKUS-7066

QUARKUS-7067

Red Hat Security Advisory: Red Hat build of Quarkus 3.27.2 release and security update

A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections.

CVE-2025-14969 is a resource management vulnerability found in the Red Hat build of Quarkus version 3.27.2, specifically within the Hibernate Reactive component. The issue occurs when an HTTP endpoint exposed by the application performs database operations and a remote client prematurely closes the HTTP connection before the operation completes. This premature termination prevents the proper release of database connections back to the connection pool, resulting in leaked connections. Over time, these leaked connections accumulate, exhausting the pool and causing a Denial of Service (DoS) as new database requests cannot be served. The vulnerability requires network access and low privileges but does not require user interaction or authentication beyond what is needed to access the HTTP endpoint. The flaw does not impact confidentiality or integrity but affects availability by potentially disrupting service. No patches or exploit code are currently publicly available, and no known exploits in the wild have been reported. The vulnerability was published on January 26, 2026, with a CVSS v3.1 score of 4.3, indicating medium severity. This issue is particularly relevant for organizations deploying applications using Red Hat's Quarkus build with Hibernate Reactive for reactive database operations, especially in environments with high concurrency or untrusted clients.

Detailed information about CVE-2025-14969: Missing Release of Resource after Effective Lifetime in Red Hat Red Hat build of Quarkus affecting Red Hat Red Hat bu

CVE-2025-14969: Missing Release of Resource after Effective Lifetime in Red Hat Red Hat build of Quarkus - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14969: Missing Release of Resource after Effective Lifetime in Red Hat Red Hat build of Quarkus 3.27.2


Red Hat Security Advisory: Red Hat build of Quarkus 3.27.2 release and security updateCVE-2025-14969 0 Red Hat has released a security update for its build of Quarkus 3.27.2 addressing four vulnerabilities: a timing attack in SCRAM authentication, a denial of service due to connection leaks in Hibernate Reactive, HTTP request smuggling via CRLF injection in Netty codec HTTP, and a worker thread exhaustion vulnerability in Quarkus REST. These issues have been rated with moderate severity by Red Hat. The update is intended to fix these vulnerabilities and improve overall stability and security of the product. MediumVulnerability#gcve #csaf #cve-2025-14969 Join the discussion	GCVE Database	02/05/2026, 14:53:30 UTC Added: 06/24/2026, 16:59:27 UTC
CVE-2025-14969: Missing Release of Resource after Effective Lifetime in Red Hat Red Hat build of Quarkus 3.27.2CVE-2025-14969 0 A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections. MediumVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2025-14969 Join the discussion	CVE Database V5	01/26/2026, 19:36:40 UTC Added: 01/26/2026, 19:50:57 UTC

Threats Tagged 'cve-2025-14969'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14969'

Lead Pen Test Professional