Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CVE-2026-27141 is a denial of service vulnerability in the golang.org/x/net/http2 package, affecting Red Hat Hardened Images. The vulnerability arises from a missing null pointer check when processing HTTP/2 frames of types 0x0a through 0x0f, which can cause the server to crash upon receiving specially crafted frames. This leads to a denial of service condition. Red Hat has acknowledged the issue and published an advisory but currently has no suitable mitigation or patch available that meets their deployment and stability standards. The vulnerability has a Red Hat CVSS v3 base score of 5.3, indicating a moderate impact, primarily availability loss. No known exploits in the wild have been reported.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7385

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-27141

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2025-58190

https://access.redhat.com/security/cve/CVE-2025-47911

https://access.redhat.com/security/cve/CVE-2025-22873

https://access.redhat.com/security/cve/CVE-2025-68119

https://access.redhat.com/security/cve/CVE-2025-61732

https://access.redhat.com/security/cve/CVE-2025-61731

https://access.redhat.com/security/cve/CVE-2025-61725

https://access.redhat.com/security/cve/CVE-2025-61724

https://access.redhat.com/security/cve/CVE-2025-61723

https://access.redhat.com/security/cve/CVE-2025-58186

https://access.redhat.com/security/cve/CVE-2025-58185

https://access.redhat.com/security/cve/CVE-2025-58181

https://access.redhat.com/security/cve/CVE-2025-47914

https://access.redhat.com/security/cve/CVE-2025-47912

https://access.redhat.com/security/cve/CVE-2025-47910

https://access.redhat.com/security/cve/CVE-2025-68121

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-27141 is a denial of service vulnerability in the golang.org/x/net/http2 package used by Red Hat Hardened Images and related products. The vulnerability arises from a missing null pointer check when processing specific HTTP/2 frame types (0x0a through 0x0f). A remote attacker can send specially crafted HTTP/2 frames to trigger a null pointer dereference, causing the server process to crash and become unavailable. Red Hat's advisory indicates no current mitigation meets their criteria, and a fix is not yet available. The vulnerability is tracked under Red Hat advisory RHSA-2026:7291 and is part of a broader update addressing multiple CVEs. The CVSS score assigned by Red Hat is 5.3 (medium severity), while other sources assign a higher score due to differing impact assessments.

https://access.redhat.com/errata/RHSA-2026:7291

textproto

CVE-2025-61724 is a medium severity vulnerability in the Go standard library's net/textproto package. The Reader.ReadResponse function uses repeated string concatenation to build response strings from multiple lines, causing inefficient algorithmic complexity. This inefficiency can lead to excessive CPU consumption and denial of service due to resource exhaustion. There is no impact on confidentiality or integrity. No patch or official fix has been confirmed yet.

The vulnerability CVE-2025-61724 affects the Go standard library net/textproto package, specifically the Reader.ReadResponse function. The function's implementation uses repeated string concatenation when processing multi-line responses, which results in inefficient algorithmic complexity. This inefficiency can cause excessive CPU usage when handling responses with many lines, leading to a denial of service condition through resource exhaustion. The vulnerability does not affect confidentiality or integrity of data. No official patch or fix has been announced or confirmed at this time.

Detailed information about CVE-2025-61724: CWE-407: Inefficient Algorithmic Complexity in Go standard library net/textproto affecting Go standard library net/te

CVE-2025-61724: CWE-407: Inefficient Algorithmic Complexity in Go standard library net/textproto - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-61724: CWE-407: Inefficient Algorithmic Complexity in Go standard library net/textproto


Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-22873 0 This update includes the following RPMs: HighVulnerability#gcve #csaf #cve-2025-22873 Join the discussion	GCVE Database	04/10/2026, 14:24:10 UTC Added: 05/26/2026, 20:58:12 UTC
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-22873 0 This update includes the following RPMs: HighVulnerability#gcve #csaf #cve-2025-22873 Join the discussion	GCVE Database	04/09/2026, 11:00:43 UTC Added: 05/26/2026, 20:58:12 UTC
CVE-2025-61724: CWE-407: Inefficient Algorithmic Complexity in Go standard library net/textprotoCVE-2025-61724 0 CVE-2025-61724 is a medium severity vulnerability in the Go standard library's net/textproto package. The Reader.ReadResponse function uses repeated string concatenation to build response strings from multiple lines, causing inefficient algorithmic complexity. This inefficiency can lead to excessive CPU consumption and denial of service due to resource exhaustion. There is no impact on confidentiality or integrity. No patch or official fix has been confirmed yet. MediumVulnerability#cve #cve-2025-61724 #cwe-407 Join the discussion	CVE Database V5	10/31/2025, 01:07:11 UTC Added: 10/29/2025, 22:24:04 UTC

Threats Tagged 'cve-2025-61724'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-61724'

Lead Pen Test Professional