Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This update for apr-util fixes the following issues:

- CVE-2025-49506: hash/password content leak via side channel timing attack against `apr_password_validate()`
  (bsc#1274237).
- CVE-2026-32327: XML stack recursion crash (bsc#1274235).
- CVE-2026-34191: SQL injection via `apr_dbd_oracle` (bsc#1274850).
- CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852).
- CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854).

The Red Hat Security Advisory RHSA-2026:58474 addresses four vulnerabilities in apr-util: CVE-2026-34501 and CVE-2026-34502 are heap buffer overflows in redis and memcached clients respectively; CVE-2025-49506 is an information disclosure vulnerability caused by non-constant-time password hash comparisons in apr_password_validate(), allowing timing attacks; CVE-2026-32327 is a denial of service vulnerability via XML stack recursion. The timing attack vulnerability is mitigated in most Red Hat environments by reliance on system crypt() implementations. Updated apr-util packages version 1.6.5-1.hum1 have been released for affected architectures. No exploits in the wild are known.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:58474

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-49506

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-34501

https://access.redhat.com/security/cve/CVE-2026-34502

https://access.redhat.com/security/cve/CVE-2026-32327

Canonical URL

https://access.redhat.com/errata/RHSA-2026:66341

https://access.redhat.com/security/updates/classification/#moderate

2512073

2512077

2512079

2512083

https://access.redhat.com/errata/RHSA-2026:66392

SUSE ratings

URL of this CSAF notice

SUSE Bug 1274235

SUSE Bug 1274237

SUSE Bug 1274850

SUSE Bug 1274852

SUSE Bug 1274854

SUSE CVE CVE-2025-49506 page

SUSE CVE CVE-2026-32327 page

SUSE CVE CVE-2026-34191 page

SUSE CVE CVE-2026-34501 page

SUSE CVE CVE-2026-34502 page

Security update for apr-util

apr-util

CVE-2025-49506 is a timing side-channel vulnerability in the Apache Portable Runtime Utility (APR-util) affecting versions up to and including 1.6.3. The apr_password_validate() function did not perform password or hash comparisons in constant time, potentially allowing attackers to infer sensitive information via timing discrepancies on platforms lacking the crypt() function, such as Windows, BeOS, NetWare, or Android. The issue is fixed in version 1.6.4.

The vulnerability in APR-util versions up to 1.6.3 involves the apr_password_validate() function, which compares passwords and hashes in a non-constant-time manner. This behavior can leak information through timing side channels, especially on platforms without the crypt() function. This flaw is classified under CWE-208 (Observable Timing Discrepancy). Users are advised to upgrade to APR-util version 1.6.4 where this issue has been addressed.

Detailed information about CVE-2025-49506: CWE-208 Observable Timing Discrepancy in Apache Software Foundation Apache Portable Runtime Utility affecting Apache 

CVE-2025-49506: CWE-208 Observable Timing Discrepancy in Apache Software Foundation Apache Portable Runtime Utility - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49506: CWE-208 Observable Timing Discrepancy in Apache Software Foundation Apache Portable Runtime Utility


Security update for apr-utilCVE-2025-49506 0 This update for apr-util fixes the following issues: - CVE-2025-49506: hash/password content leak via side channel timing attack against `apr_password_validate()` (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL injection via `apr_dbd_oracle` (bsc#1274850). - CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852). - CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854). CriticalVulnerability#gcve #csaf #cve-2025-49506 Join the discussion	GCVE Database	08/28/2026, 08:23:34 UTC Added: 08/22/2026, 13:40:34 UTC
CVE-2025-49506: CWE-208 Observable Timing Discrepancy in Apache Software Foundation Apache Portable Runtime UtilityCVE-2025-49506 0 CVE-2025-49506 is a timing side-channel vulnerability in the Apache Portable Runtime Utility (APR-util) affecting versions up to and including 1.6.3. The apr_password_validate() function did not perform password or hash comparisons in constant time, potentially allowing attackers to infer sensitive information via timing discrepancies on platforms lacking the crypt() function, such as Windows, BeOS, NetWare, or Android. The issue is fixed in version 1.6.4. HighVulnerability#cve #cve-2025-49506 #cwe-208 Join the discussion	CVE Database V5	08/06/2026, 14:33:12 UTC Added: 08/06/2026, 14:41:55 UTC

Threats Tagged 'cve-2025-49506'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49506'

Lead Pen Test Professional