Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

edk2

A security vulnerability (CVE-2025-2296) in the edk2 package used by Red Hat Enterprise Linux 10 allows arbitrary command execution due to improper input validation. The edk2 package provides UEFI firmware support for virtual machines such as QEMU and KVM. Red Hat has released an important security update addressing this issue for multiple architectures and variants of Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products.

The vulnerability identified as CVE-2025-2296 affects the edk2 package, which is a sample 64-bit UEFI firmware for virtual machines. The flaw is due to improper input validation that enables arbitrary command execution. This security issue impacts Red Hat Enterprise Linux 10 and its variants across several architectures including x86_64, ARM 64, Power, and IBM z Systems. Red Hat has issued an important security advisory (RHSA-2026:18465) with updated packages that fix this vulnerability. The advisory references the CVE for detailed impact and scoring information and provides instructions for applying the update.

Detailed information about Red Hat Security Advisory: edk2 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details,

Red Hat Security Advisory: edk2 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:18465

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index

https://access.redhat.com/security/updates/classification/#important

2420637

RHEL-112106

RHEL-116433

RHEL-118386

RHEL-138335

RHEL-147785

RHEL-150696

Canonical URL

Red Hat Security Advisory: edk2 security update

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

CVE-2025-2296 identifies a critical vulnerability in the TianoCore EDK2 BIOS firmware, specifically categorized under CWE-20 for improper input validation. The flaw resides in the BIOS code responsible for validating inputs, where insufficient checks allow an attacker with local high privileges to manipulate the control flow unexpectedly. This manipulation can lead to arbitrary command execution at the firmware level, which is particularly dangerous as BIOS operates below the operating system, granting attackers persistent and stealthy control over the system. The vulnerability affects version 0 of EDK2, a widely used open-source UEFI firmware implementation that underpins many modern PC and server platforms. The CVSS 4.0 score of 8.4 reflects its high severity, with an attack vector requiring network access (AV:N) but high privileges (PR:H), no user interaction (UI:N), and significant impacts on confidentiality, integrity, and availability. The scope is limited to local attackers with elevated privileges, but the consequences include potential full system compromise, firmware persistence, and bypass of OS-level security controls. No patches or known exploits are currently available, but the vulnerability's presence in foundational firmware makes it a critical risk. The improper input validation could stem from malformed data passed to BIOS routines, possibly during boot or runtime configuration changes, enabling control flow hijacking. This vulnerability underscores the importance of rigorous input validation in firmware development and the risks posed by firmware-level flaws.

Detailed information about CVE-2025-2296: CWE-20 Improper Input Validation in TianoCore EDK2 affecting TianoCore EDK2. Get real-time updates, technical details,

CVE-2025-2296: CWE-20 Improper Input Validation in TianoCore EDK2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-2296: CWE-20 Improper Input Validation in TianoCore EDK2


Red Hat Security Advisory: edk2 security updateCVE-2025-2296 0 A security vulnerability (CVE-2025-2296) in the edk2 package used by Red Hat Enterprise Linux 10 allows arbitrary command execution due to improper input validation. The edk2 package provides UEFI firmware support for virtual machines such as QEMU and KVM. Red Hat has released an important security update addressing this issue for multiple architectures and variants of Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products. HighVulnerability#gcve #csaf #cve-2025-2296 Join the discussion	GCVE Database	05/19/2026, 10:11:02 UTC Added: 06/25/2026, 21:46:46 UTC
CVE-2025-2296: CWE-20 Improper Input Validation in TianoCore EDK2CVE-2025-2296 0 EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability. HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-2296 #cwe-20 Join the discussion	CVE Database V5	12/09/2025, 15:00:48 UTC Added: 12/09/2025, 15:05:34 UTC

Threats Tagged 'cve-2025-2296'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-2296'

Lead Pen Test Professional