Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.

Red Hat Developer Hub versions before 1.7.0 contain multiple security vulnerabilities including CVE-2025-5417 and eight others. One notable vulnerability (CVE-2025-22870) involves improper proxy host matching that allows bypassing proxy settings by manipulating IPv6 zone IDs, potentially leading to denial of service or unauthorized data access. The vulnerabilities span several CWE categories such as improper input validation (CWE-20), improper access control (CWE-266), and path traversal (CWE-22). Red Hat released RHDH 1.7.0 to address these issues, updating underlying components like Backstage to version 1.39. The advisory does not list explicit patches but indicates the new version as the fix.

Detailed information about Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release. affecting Red Hat Product Security Red Hat. Get real-time updates, te

Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:14090

https://access.redhat.com/security/cve/CVE-2025-22870

https://access.redhat.com/security/cve/CVE-2025-32996

https://access.redhat.com/security/cve/CVE-2025-32997

https://access.redhat.com/security/cve/CVE-2025-48387

https://access.redhat.com/security/cve/CVE-2025-48997

https://access.redhat.com/security/cve/CVE-2025-5417

https://access.redhat.com/security/cve/CVE-2025-54419

https://access.redhat.com/security/cve/CVE-2025-6545

https://access.redhat.com/security/cve/CVE-2025-7338

https://access.redhat.com/security/updates/classification/

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://issues.redhat.com/browse/RHIDP-6469

https://issues.redhat.com/browse/RHIDP-6470

https://issues.redhat.com/browse/RHIDP-6937

Canonical URL

Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release.

An insufficient access control vulnerability was found in the Red Hat
Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the
rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts.

CVE-2025-5417 is a vulnerability identified in the Red Hat Developer Hub, specifically within the rhdh/rhdh-hub-rhel9 container image. The flaw arises from insufficient access control mechanisms that allow cluster administrators or users with standard access privileges to the Red Hat Developer Hub namespace to access and modify the container image's content. This unauthorized modification capability compromises the confidentiality and integrity of the data within the container image. However, these changes are ephemeral and revert upon pod restart, limiting the persistence of the attack. The vulnerability does not affect availability and does not require user interaction, but it does require high privileges (cluster admin or equivalent). The CVSS 3.1 base score is 6.1, reflecting a medium severity level, with attack vector being adjacent network, low attack complexity, and high privileges required. No known exploits have been reported in the wild as of the publication date. The vulnerability impacts the security posture of Red Hat Developer Hub deployments, potentially allowing privileged users to tamper with container images, which could lead to unauthorized data exposure or manipulation during runtime.

Detailed information about CVE-2025-5417: Incorrect Privilege Assignment in Red Hat Red Hat Developer Hub affecting Red Hat Red Hat Developer Hub. Get real-time

CVE-2025-5417: Incorrect Privilege Assignment in Red Hat Red Hat Developer Hub - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-5417: Incorrect Privilege Assignment in Red Hat Red Hat Developer Hub


Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release.CVE-2025-5417 0 Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins. HighVulnerability#gcve #csaf #cve-2025-5417 Join the discussion	GCVE Database	08/19/2025, 11:33:06 UTC Added: 06/02/2026, 21:43:30 UTC
CVE-2025-5417: Incorrect Privilege Assignment in Red Hat Red Hat Developer HubCVE-2025-5417 0 An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts. MediumVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2025-5417 Join the discussion	CVE Database V5	08/19/2025, 04:28:08 UTC Added: 08/19/2025, 04:47:43 UTC

Threats Tagged 'cve-2025-5417'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-5417'

Lead Pen Test Professional