Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CVE-2026-27141 is a denial of service vulnerability in the golang.org/x/net/http2 package, affecting Red Hat Hardened Images. The vulnerability arises from a missing null pointer check when processing HTTP/2 frames of types 0x0a through 0x0f, which can cause the server to crash upon receiving specially crafted frames. This leads to a denial of service condition. Red Hat has acknowledged the issue and published an advisory but currently has no suitable mitigation or patch available that meets their deployment and stability standards. The vulnerability has a Red Hat CVSS v3 base score of 5.3, indicating a moderate impact, primarily availability loss. No known exploits in the wild have been reported.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7385

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-27141

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2025-58190

https://access.redhat.com/security/cve/CVE-2025-47911

https://access.redhat.com/security/cve/CVE-2025-22873

https://access.redhat.com/security/cve/CVE-2025-68119

https://access.redhat.com/security/cve/CVE-2025-61732

https://access.redhat.com/security/cve/CVE-2025-61731

https://access.redhat.com/security/cve/CVE-2025-61725

https://access.redhat.com/security/cve/CVE-2025-61724

https://access.redhat.com/security/cve/CVE-2025-61723

https://access.redhat.com/security/cve/CVE-2025-58186

https://access.redhat.com/security/cve/CVE-2025-58185

https://access.redhat.com/security/cve/CVE-2025-58181

https://access.redhat.com/security/cve/CVE-2025-47914

https://access.redhat.com/security/cve/CVE-2025-47912

https://access.redhat.com/security/cve/CVE-2025-47910

https://access.redhat.com/security/cve/CVE-2025-68121

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-27141 is a denial of service vulnerability in the golang.org/x/net/http2 package used by Red Hat Hardened Images and related products. The vulnerability arises from a missing null pointer check when processing specific HTTP/2 frame types (0x0a through 0x0f). A remote attacker can send specially crafted HTTP/2 frames to trigger a null pointer dereference, causing the server process to crash and become unavailable. Red Hat's advisory indicates no current mitigation meets their criteria, and a fix is not yet available. The vulnerability is tracked under Red Hat advisory RHSA-2026:7291 and is part of a broader update addressing multiple CVEs. The CVSS score assigned by Red Hat is 5.3 (medium severity), while other sources assign a higher score due to differing impact assessments.

https://access.redhat.com/errata/RHSA-2026:7291

http

CVE-2025-58186 is a medium severity vulnerability in the Go standard library net/http package. It involves uncontrolled resource consumption due to the lack of a limit on the number of cookies parsed, despite an overall HTTP header size limit of 1MB. An attacker can exploit this by sending many small cookies, causing the server to allocate excessive memory and degrade availability.

The vulnerability in the Go standard library's net/http package arises because while HTTP headers have a default size limit of 1MB, there is no limit on the number of cookies parsed. An attacker can send numerous very small cookies (e.g., "a=;") which forces the HTTP server to allocate a large number of internal structures, resulting in significant memory consumption. This is classified under CWE-400: Uncontrolled Resource Consumption. The affected versions include all versions up to 1.25.0. The CVSS v3.1 base score is 5.3 (medium severity), reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting availability only.

Detailed information about CVE-2025-58186: CWE-400: Uncontrolled Resource Consumption in Go standard library net/http affecting Go standard library net/http. Ge

CVE-2025-58186: CWE-400: Uncontrolled Resource Consumption in Go standard library net/http - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-58186: CWE-400: Uncontrolled Resource Consumption in Go standard library net/http


Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-22873 0 This update includes the following RPMs: HighVulnerability#gcve #csaf #cve-2025-22873 Join the discussion	GCVE Database	04/10/2026, 14:24:10 UTC Added: 05/26/2026, 20:58:12 UTC
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-22873 0 This update includes the following RPMs: HighVulnerability#gcve #csaf #cve-2025-22873 Join the discussion	GCVE Database	04/09/2026, 11:00:43 UTC Added: 05/26/2026, 20:58:12 UTC
CVE-2025-58186: CWE-400: Uncontrolled Resource Consumption in Go standard library net/httpCVE-2025-58186 0 CVE-2025-58186 is a medium severity vulnerability in the Go standard library net/http package. It involves uncontrolled resource consumption due to the lack of a limit on the number of cookies parsed, despite an overall HTTP header size limit of 1MB. An attacker can exploit this by sending many small cookies, causing the server to allocate excessive memory and degrade availability. MediumVulnerability#cve #cve-2025-58186 #cwe-400 Join the discussion	CVE Database V5	10/31/2025, 01:06:39 UTC Added: 10/29/2025, 22:24:04 UTC

Threats Tagged 'cve-2025-58186'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-58186'

Lead Pen Test Professional