Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 2.16.4 provides these changes:

CVE-2024-25621 is a local privilege escalation vulnerability in containerd caused by overly permissive default directory permissions. Local users on the host can access the metadata store, content store, and Kubernetes local volumes, which may contain setuid binaries, enabling privilege escalation. The vulnerability affects several Red Hat products that ship containerd, including OpenShift API for Data Protection and Advanced Cluster Management for Kubernetes. The issue can be mitigated by restricting permissions on containerd directories or running containerd in rootless mode. Red Hat has provided advisories and guidance but the patch status is not explicitly confirmed in the advisory content provided.

Detailed information about Red Hat Security Advisory: RHOAI 2.16.4 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, tec

Red Hat Security Advisory: RHOAI 2.16.4 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:25127

https://access.redhat.com/security/cve/CVE-2024-25621

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2025-68151

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/security/cve/CVE-2026-25679

https://access.redhat.com/security/cve/CVE-2026-26017

https://access.redhat.com/security/cve/CVE-2026-26018

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/security/cve/CVE-2026-32936

https://access.redhat.com/security/cve/CVE-2026-33186

https://access.redhat.com/security/cve/CVE-2026-34986

https://access.redhat.com/security/cve/CVE-2026-35579

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:5807

https://access.redhat.com/security/cve/CVE-2025-12060

https://access.redhat.com/security/cve/CVE-2025-12638

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-6193

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66626

https://access.redhat.com/security/cve/CVE-2025-68156

https://access.redhat.com/security/cve/CVE-2025-69873

https://access.redhat.com/security/cve/CVE-2026-1526

https://access.redhat.com/security/cve/CVE-2026-1528

https://access.redhat.com/security/cve/CVE-2026-2229

https://access.redhat.com/security/cve/CVE-2026-25223

https://access.redhat.com/security/cve/CVE-2026-25639

https://access.redhat.com/security/cve/CVE-2026-29074

https://access.redhat.com/security/cve/CVE-2026-32141

https://access.redhat.com/errata/RHSA-2026:2343

https://access.redhat.com/security/cve/CVE-2025-52881

https://access.redhat.com/security/cve/CVE-2025-58183

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore

https://access.redhat.com/errata/RHSA-2026:2456

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.26/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-65945

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-66490

https://access.redhat.com/security/cve/CVE-2026-22029

https://access.redhat.com/errata/RHSA-2026:2900

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-64329

https://access.redhat.com/security/cve/CVE-2025-66506

https://access.redhat.com/security/cve/CVE-2026-23745

https://access.redhat.com/security/cve/CVE-2026-24049

https://access.redhat.com/security/cve/CVE-2026-24842

https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html

https://access.redhat.com/errata/RHSA-2026:37387

https://access.redhat.com/security/cve/CVE-2024-40635

https://access.redhat.com/security/cve/CVE-2024-45310

https://access.redhat.com/security/cve/CVE-2025-21613

https://access.redhat.com/security/cve/CVE-2025-21614

https://access.redhat.com/security/cve/CVE-2025-22870

https://access.redhat.com/security/cve/CVE-2025-47911

https://access.redhat.com/security/cve/CVE-2025-54410

https://access.redhat.com/security/cve/CVE-2025-58058

https://access.redhat.com/security/cve/CVE-2025-8766

https://access.redhat.com/security/cve/CVE-2026-22772

https://access.redhat.com/security/cve/CVE-2026-23831

https://access.redhat.com/security/cve/CVE-2026-24117

https://access.redhat.com/security/cve/CVE-2026-25680

https://access.redhat.com/security/cve/CVE-2026-25681

https://access.redhat.com/security/cve/CVE-2026-25934

https://access.redhat.com/errata/RHSA-2025:23248

https://access.redhat.com/security/cve/CVE-2025-47907

https://access.redhat.com/security/cve/CVE-2025-59375

https://access.redhat.com/security/cve/CVE-2025-6965

https://access.redhat.com/security/cve/CVE-2025-9648

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.7/html-single/release_notes/index#about-this-release-479_release-notes-47

https://access.redhat.com/errata/RHSA-2025:23644

https://access.redhat.com/errata/RHSA-2026:3122

https://access.redhat.com/security/cve/CVE-2025-47913

https://catalog.redhat.com/software/containers/search

https://access.redhat.com/errata/RHSA-2025:22955

https://access.redhat.com/errata/RHSA-2025:23428

https://access.redhat.com/errata/RHSA-2026:51033

https://access.redhat.com/security/cve/CVE-2026-27136

https://access.redhat.com/security/cve/CVE-2026-32281

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-33747

https://access.redhat.com/security/cve/CVE-2026-33748

https://access.redhat.com/security/cve/CVE-2026-33810

https://access.redhat.com/security/cve/CVE-2026-33811

https://access.redhat.com/security/cve/CVE-2026-39820

Red Hat Security Advisory: RHOAI 2.16.4 - Red Hat OpenShift AI

trustyai-service-operator

A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.

CVE-2025-6193 identifies an OS command injection vulnerability in the TrustyAI Explainability toolkit, a component integrated within Red Hat OpenShift AI (RHOAI). The flaw arises from improper neutralization of special elements in input fields of the LMEValJob custom resource (CR). Specifically, when a user with deployment permissions creates or modifies an LMEValJob CR with maliciously crafted input, arbitrary OS commands can be executed within the terminal of the LMEvalJob pod. This vulnerability leverages the Kubernetes custom resource mechanism, where the LMEValJob pod processes the CR fields insecurely, allowing injection of shell commands. The CVSS 3.1 score is 5.9 (medium), reflecting network attack vector, low attack complexity, but requiring high privileges and user interaction. The vulnerability affects version 0 of the product, indicating early or initial releases. Exploitation could lead to partial confidentiality loss, integrity compromise, and availability degradation of the pod and potentially the cluster environment if lateral movement occurs. No public exploits or patches are currently documented, but the vulnerability is published and should be addressed promptly. The issue highlights the importance of input validation and secure coding practices in Kubernetes CRDs and AI explainability toolkits.

Detailed information about CVE-2025-6193: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Red Hat Red Hat OpenShif

CVE-2025-6193: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Red Hat Red Hat OpenShift AI (RHOAI) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6193: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')


Red Hat Security Advisory: RHOAI 2.16.4 - Red Hat OpenShift AICVE-2024-25621 0 Release of RHOAI 2.16.4 provides these changes: HighVulnerability#gcve #csaf #cve-2024-25621 Join the discussion	GCVE Database	03/25/2026, 12:32:51 UTC Added: 05/26/2026, 20:58:12 UTC
CVE-2025-6193: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CVE-2025-6193 0 A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-6193 Join the discussion	CVE Database V5	06/20/2025, 15:54:13 UTC Added: 06/21/2025, 10:50:42 UTC

Threats Tagged 'cve-2025-6193'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6193'

Lead Pen Test Professional