Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat OpenShift sandboxed containers, based on the Kata Containers project.

The vulnerability CVE-2025-5791 in Red Hat OpenShift sandboxed containers stems from a flaw in the Go net/http package, which incorrectly accepts HTTP messages ending with a line feed (LF) rather than the proper CRLF sequence. This can cause HTTP request smuggling when interacting with other servers that also misinterpret such messages. The issue is related to CWE-444 (Inconsistent Interpretation of HTTP Requests) and CWE-266 (Incorrect Privilege Assignment). Red Hat's advisory references CVE-2025-22871, which details this flaw and its impact. The vulnerability can lead to web cache poisoning, firewall bypass, unauthorized access, and potential exposure of client credentials. Red Hat rates the severity as high for affected components but notes that some products like Red Hat Satellite are less impacted due to their client-only usage of the affected component. Currently, no mitigation or patch meets Red Hat's criteria for ease of use, applicability, or stability, and remediation status is under investigation.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift sandboxed containers release affecting Red Hat Product Security Red Hat. Get real-time u

Red Hat Security Advisory: Red Hat OpenShift sandboxed containers release - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:12359

https://access.redhat.com/security/cve/CVE-2025-22871

https://access.redhat.com/security/cve/CVE-2025-5791

https://access.redhat.com/security/updates/classification/

Canonical URL

Red Hat Security Advisory: Red Hat OpenShift sandboxed containers release

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.

CVE-2025-5791 is a vulnerability discovered in the user's crate for Rust, which is utilized by Red Hat OpenShift sandboxed containers version 1.1, specifically crate version 0.8.0. The vulnerability stems from an incorrect privilege assignment mechanism related to group membership enumeration. When a user or process has fewer than exactly 1024 groups, the system erroneously includes the root group in the access list due to flawed logic in group listing. This incorrect inclusion effectively grants elevated privileges to the affected user or process, enabling privilege escalation. The flaw does not require user interaction but does require the attacker to have some level of privileges (PR:L) to exploit. The vulnerability impacts confidentiality and integrity by allowing unauthorized access to root-level privileges, but it does not affect availability. The CVSS 3.1 score of 7.1 reflects these impacts with an attack vector limited to local access (AV:L), low attack complexity (AC:L), and no user interaction (UI:N). Although no known exploits are currently reported in the wild, the vulnerability poses a significant risk in containerized environments where privilege separation is critical. The root cause is a boundary condition in group membership handling, which is a common source of privilege escalation bugs in Unix-like systems. Red Hat OpenShift users running the affected crate version should consider this vulnerability a priority for remediation.

Detailed information about CVE-2025-5791: Incorrect Privilege Assignment in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat Enterprise Linux 10. G

CVE-2025-5791: Incorrect Privilege Assignment in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-5791: Incorrect Privilege Assignment


Red Hat Security Advisory: Red Hat OpenShift sandboxed containers releaseCVE-2025-5791 0 Red Hat OpenShift sandboxed containers, based on the Kata Containers project. HighVulnerability#gcve #csaf #cve-2025-5791 Join the discussion	GCVE Database	07/31/2025, 10:50:08 UTC Added: 05/28/2026, 22:15:03 UTC
CVE-2025-5791: Incorrect Privilege AssignmentCVE-2025-5791 0 A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-5791 Join the discussion	CVE Database V5	06/06/2025, 13:10:07 UTC Added: 06/06/2025, 13:46:48 UTC

Threats Tagged 'cve-2025-5791'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-5791'

Lead Pen Test Professional