Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Satellite provides a container image that you can use to run an MCP server locally. The MCP server for Satellite is designed for advanced reporting and data analysis that leverages AI capabilities. You can use it to generate dynamic and comprehensive reports from your Satellite inventory.

CVE-2025-69196 describes a vulnerability in FastMCP, a framework for building MCP applications used in Red Hat products. The flaw involves incorrect processing of the resource parameter during authorization and token requests, leading to security tokens being issued for an unintended base URL rather than the specific MCP server. This can result in unauthorized access or sensitive information disclosure. The vulnerability affects Red Hat Satellite and other products leveraging FastMCP. Red Hat has published a security advisory (RHSA-2026:36350) but has not yet released a patch or fix. The advisory notes the vulnerability's impact on confidentiality and integrity, with a high severity rating. The issue is related to CWE-1220 (Insufficient Granularity of Access Control) among other CWEs. The container image for the MCP server is available as a Technology Preview, indicating ongoing development and evaluation.

Detailed information about Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview affecting Red Hat Pro

Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:36350

https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index

https://access.redhat.com/security/cve/CVE-2025-69196

https://access.redhat.com/security/cve/CVE-2025-69872

https://access.redhat.com/security/cve/CVE-2026-32871

https://access.redhat.com/security/cve/CVE-2026-44431

https://access.redhat.com/security/cve/CVE-2026-44432

https://access.redhat.com/security/cve/CVE-2026-48526

https://access.redhat.com/security/updates/classification/

https://catalog.redhat.com/software/containers/search

Canonical URL

Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview

fastmcp

FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for the MCP server, the token is issued for the base_url passed to the OAuthProxy during initialization. This issue has been patched 2.14.2.

The vulnerability CVE-2025-69196 in jlowin fastmcp (prior to 2.14.2) is an incorrect authorization issue (CWE-863). The server mishandles the resource parameter in OAuth token requests, issuing tokens for the base_url used during OAuthProxy initialization rather than the intended MCP server resource. This mis-authorization could lead to improper token issuance. The issue has been addressed and fixed in fastmcp version 2.14.2. The CVSS 4.0 score is 7.4 (high severity), indicating a network attack vector with high complexity and user interaction required, and high impact on confidentiality and integrity. Red Hat has published an advisory referencing this CVE and confirms the fix in version 2.14.2.

Detailed information about CVE-2025-69196: CWE-863: Incorrect Authorization in jlowin fastmcp affecting jlowin fastmcp. Get real-time updates, technical details

CVE-2025-69196: CWE-863: Incorrect Authorization in jlowin fastmcp - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-69196: CWE-863: Incorrect Authorization in jlowin fastmcp


Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology PreviewCVE-2025-69196 0 Satellite provides a container image that you can use to run an MCP server locally. The MCP server for Satellite is designed for advanced reporting and data analysis that leverages AI capabilities. You can use it to generate dynamic and comprehensive reports from your Satellite inventory. HighVulnerability#gcve #csaf #cve-2025-69196 Join the discussion	GCVE Database	07/07/2026, 19:24:16 UTC Added: 07/10/2026, 09:25:00 UTC
CVE-2025-69196: CWE-863: Incorrect Authorization in jlowin fastmcpCVE-2025-69196 0 FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for the MCP server, the token is issued for the base_url passed to the OAuthProxy during initialization. This issue has been patched 2.14.2. HighVulnerability#cve #cve-2025-69196 #cwe-863 Join the discussion	CVE Database V5	03/16/2026, 18:07:06 UTC Added: 03/16/2026, 18:43:23 UTC

Threats Tagged 'cve-2025-69196'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-69196'

Lead Pen Test Professional