Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 3.3.3 provides these changes:

CVE-2025-6242 is a vulnerability in the node-forge library used by Red Hat OpenShift AI and other Red Hat products. It involves an interpretation conflict in ASN.1 structure parsing that allows unauthenticated attackers to bypass downstream cryptographic verification and security decisions by crafting malicious ASN.1 data. This leads to semantic divergence in schema validation. The vulnerability is rated important by Red Hat with a CVSS v3 base score of 8.7 (Red Hat rating). It affects cryptographic integrity and confidentiality but does not impact availability. Red Hat has not provided a patch or mitigation that meets their standards for deployment and stability. Updated Red Hat OpenShift AI images (3.3.3) are available, but no direct fix for this CVE is included. Red Hat continues to investigate and may provide fixes in future updates.

Detailed information about Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:19712

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-59057

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-62164

https://access.redhat.com/security/cve/CVE-2025-6242

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66448

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-69223

https://access.redhat.com/security/cve/CVE-2025-69873

https://access.redhat.com/security/cve/CVE-2026-0846

https://access.redhat.com/security/cve/CVE-2026-0847

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/errata/RHSA-2026:10184

https://access.redhat.com/security/cve/CVE-2025-11157

https://access.redhat.com/security/cve/CVE-2025-12103

https://access.redhat.com/security/cve/CVE-2025-14009

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-68131

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2025-69534

https://access.redhat.com/security/cve/CVE-2026-1002

https://access.redhat.com/security/cve/CVE-2026-22773

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI

Release of RHOAI 3.3 provides these changes:

A local privilege escalation vulnerability (CVE-2024-25621) exists in containerd due to overly permissive default directory permissions. Local users on the host can access the metadata store, content store, and Kubernetes local volumes, potentially exploiting setuid binaries to elevate privileges. The vulnerability affects Red Hat OpenShift AI 3.3 and other related Red Hat products that include containerd components. Red Hat has provided updated container images and documented manual mitigation steps involving restricting directory permissions or running containerd in rootless mode.

Detailed information about Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, techni

Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:3713

https://access.redhat.com/security/cve/CVE-2024-25621

https://access.redhat.com/security/cve/CVE-2025-12638

https://access.redhat.com/security/cve/CVE-2025-14180

https://access.redhat.com/security/cve/CVE-2025-14920

https://access.redhat.com/security/cve/CVE-2025-14921

https://access.redhat.com/security/cve/CVE-2025-14922

https://access.redhat.com/security/cve/CVE-2025-14924

https://access.redhat.com/security/cve/CVE-2025-14925

https://access.redhat.com/security/cve/CVE-2025-14926

https://access.redhat.com/security/cve/CVE-2025-14927

https://access.redhat.com/security/cve/CVE-2025-14928

https://access.redhat.com/security/cve/CVE-2025-14929

https://access.redhat.com/security/cve/CVE-2025-14930

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-52881

https://access.redhat.com/security/cve/CVE-2025-59425

https://access.redhat.com/errata/RHSA-2026:25127

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2025-68151

https://access.redhat.com/security/cve/CVE-2026-25679

https://access.redhat.com/security/cve/CVE-2026-26017

https://access.redhat.com/security/cve/CVE-2026-26018

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/security/cve/CVE-2026-32936

https://access.redhat.com/security/cve/CVE-2026-33186

https://access.redhat.com/security/cve/CVE-2026-34986

https://access.redhat.com/security/cve/CVE-2026-35579

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:37387

https://access.redhat.com/security/cve/CVE-2024-40635

https://access.redhat.com/security/cve/CVE-2024-45310

https://access.redhat.com/security/cve/CVE-2025-21613

https://access.redhat.com/security/cve/CVE-2025-21614

https://access.redhat.com/security/cve/CVE-2025-22870

https://access.redhat.com/security/cve/CVE-2025-47911

https://access.redhat.com/security/cve/CVE-2025-54410

https://access.redhat.com/security/cve/CVE-2025-58058

https://access.redhat.com/security/cve/CVE-2025-64329

https://access.redhat.com/security/cve/CVE-2025-66506

https://access.redhat.com/security/cve/CVE-2025-8766

https://access.redhat.com/security/cve/CVE-2026-22772

https://access.redhat.com/security/cve/CVE-2026-23831

https://access.redhat.com/security/cve/CVE-2026-24117

https://access.redhat.com/security/cve/CVE-2026-25680

https://access.redhat.com/security/cve/CVE-2026-25681

https://access.redhat.com/security/cve/CVE-2026-25934

https://access.redhat.com/errata/RHSA-2026:2343

https://access.redhat.com/security/cve/CVE-2025-58183

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore

https://access.redhat.com/errata/RHSA-2025:23248

https://access.redhat.com/security/cve/CVE-2025-47907

https://access.redhat.com/security/cve/CVE-2025-59375

https://access.redhat.com/security/cve/CVE-2025-6965

https://access.redhat.com/security/cve/CVE-2025-9648

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.7/html-single/release_notes/index#about-this-release-479_release-notes-47

https://access.redhat.com/errata/RHSA-2026:2456

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.26/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-65945

https://access.redhat.com/security/cve/CVE-2025-66490

https://access.redhat.com/security/cve/CVE-2026-22029

https://access.redhat.com/errata/RHSA-2026:51033

https://access.redhat.com/security/cve/CVE-2026-27136

https://access.redhat.com/security/cve/CVE-2026-32281

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-33747

https://access.redhat.com/security/cve/CVE-2026-33748

https://access.redhat.com/security/cve/CVE-2026-33810

https://access.redhat.com/security/cve/CVE-2026-33811

https://access.redhat.com/security/cve/CVE-2026-39820

https://access.redhat.com/security/cve/CVE-2026-39821

https://access.redhat.com/errata/RHSA-2026:2900

https://access.redhat.com/security/cve/CVE-2026-23745

https://access.redhat.com/security/cve/CVE-2026-24049

https://access.redhat.com/security/cve/CVE-2026-24842

https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html

https://access.redhat.com/errata/RHSA-2025:23428

https://access.redhat.com/errata/RHSA-2025:22955

https://access.redhat.com/security/cve/CVE-2025-47913

https://catalog.redhat.com/software/containers/search

https://access.redhat.com/errata/RHSA-2025:23644

Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI

A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.

CVE-2025-6242 is a Server-Side Request Forgery (SSRF) vulnerability identified in the MediaConnector class of the vLLM project's multimodal feature set within the Red Hat AI Inference Server. The vulnerability specifically affects the load_from_url and load_from_url_async methods, which are designed to fetch and process media content from URLs provided by users. Due to insufficient validation and lack of restrictions on the target hosts, an attacker can exploit this flaw to coerce the server into making arbitrary HTTP requests to internal or otherwise restricted network resources. This can lead to unauthorized access to sensitive internal services, potentially exposing confidential data or enabling further attacks such as internal port scanning or exploitation of other internal vulnerabilities. The CVSS 3.1 base score is 7.1, reflecting a high severity with network attack vector, high complexity, low privileges required, no user interaction, and significant confidentiality and availability impacts. Although no known exploits have been reported in the wild yet, the vulnerability's nature and the critical role of AI inference servers in enterprise environments make it a significant risk. The vulnerability was reserved in June 2025 and published in October 2025, indicating recent discovery and disclosure. The lack of affected version details and patch links suggests that remediation may still be in progress or forthcoming from Red Hat. Given the AI Inference Server's role in processing potentially sensitive data and integrating with internal networks, exploitation could facilitate lateral movement, data exfiltration, or denial of service within affected organizations.

Detailed information about CVE-2025-6242: Server-Side Request Forgery (SSRF) in Red Hat Red Hat AI Inference Server affecting Red Hat Red Hat AI Inference Serve

CVE-2025-6242: Server-Side Request Forgery (SSRF) in Red Hat Red Hat AI Inference Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6242: Server-Side Request Forgery (SSRF) in Red Hat Red Hat AI Inference Server


Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AICVE-2025-6242 0 Release of RHOAI 3.3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2025-6242 Join the discussion	GCVE Database	05/20/2026, 15:49:06 UTC Added: 05/26/2026, 20:57:56 UTC
Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AICVE-2024-25621 0 Release of RHOAI 3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2024-25621 Join the discussion	GCVE Database	03/04/2026, 07:18:30 UTC Added: 05/26/2026, 20:58:12 UTC
CVE-2025-6242: Server-Side Request Forgery (SSRF) in Red Hat Red Hat AI Inference ServerCVE-2025-6242 0 A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources. HighVulnerabilityUnited StatesGermanyUnited Kingdom+8#cve #cve-2025-6242 Join the discussion	CVE Database V5	10/07/2025, 19:45:18 UTC Added: 10/07/2025, 20:00:25 UTC

Threats Tagged 'cve-2025-6242'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6242'

Lead Pen Test Professional