Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1.
This release updates to the latest version.

The Red Hat RHEL-8 based Middleware Containers container images were updated to fix several security issues documented in multiple Red Hat Security Advisories (RHSA-2026:11077, RHSA-2026:7667, RHSA-2026:8534, RHSA-2026:9745). The vulnerabilities addressed include CVE-2025-10158 (rsync out-of-bounds array access), CVE-2025-9820 (gnutls stack-based buffer overflow), CVE-2025-14831 (gnutls denial of service), CVE-2026-3497 (openssh GSSAPI information disclosure or denial of service), CVE-2026-27135 (nghttp2 denial of service), CVE-2026-4424 (libarchive information disclosure), CVE-2026-4519 (python command-line option injection), CVE-2026-5121 (libarchive arbitrary code execution), CVE-2026-6100 (python use-after-free leading to arbitrary code execution or information disclosure), and CVE-2026-4786 (python command injection). These fixes are backported into updated container images. Users of these images should upgrade and rebuild dependent containers to mitigate these issues. The vendor advisory confirms the availability of updated images and patches.

Detailed information about Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:5606

https://access.redhat.com/security/cve/CVE-2025-12801

https://access.redhat.com/security/cve/CVE-2025-14831

https://access.redhat.com/security/cve/CVE-2025-15281

https://access.redhat.com/security/cve/CVE-2025-15366

https://access.redhat.com/security/cve/CVE-2025-15367

https://access.redhat.com/security/cve/CVE-2025-9820

https://access.redhat.com/security/cve/CVE-2026-0861

https://access.redhat.com/security/cve/CVE-2026-0865

https://access.redhat.com/security/cve/CVE-2026-0915

https://access.redhat.com/security/cve/CVE-2026-1299

https://access.redhat.com/security/cve/CVE-2026-22695

https://access.redhat.com/security/cve/CVE-2026-22801

https://access.redhat.com/security/cve/CVE-2026-23490

https://access.redhat.com/security/cve/CVE-2026-25646

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:7477

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-32990

https://access.redhat.com/security/cve/CVE-2025-32989

https://access.redhat.com/security/cve/CVE-2025-32988

https://access.redhat.com/security/cve/CVE-2026-1584

https://access.redhat.com/errata/RHSA-2026:4655

https://access.redhat.com/errata/RHSA-2026:13812

https://access.redhat.com/security/updates/classification/#important

https://access.redhat.com/errata/RHSA-2026:11077

https://access.redhat.com/errata/RHSA-2026:7667

https://access.redhat.com/errata/RHSA-2026:8534

https://access.redhat.com/errata/RHSA-2026:9745

https://errata.engineering.redhat.com/advisory/165062

https://access.redhat.com/containers

2392528

2415637

2423177

2447085

2448754

2449006

2449649

2452945

2457932

2458049

https://access.redhat.com/security/updates/classification/#moderate

Red Hat Security Advisory: Red Hat Ceph Storage

Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.
This release updates to the latest version.

This advisory covers a security update for Red Hat Update Infrastructure (RHUI) 5.1 container images, which are based on the latest RHUI RPM packages and ubi9 or ubi9-init base images. Among the addressed vulnerabilities is CVE-2025-11187, a flaw in OpenSSL versions 3.4, 3.5, and 3.6 where improper validation of PBMAC1 parameters in PKCS#12 MAC verification can cause a stack buffer overflow or NULL pointer dereference. This vulnerability can lead to denial of service or, in some cases, arbitrary code execution if an application processes a maliciously crafted PKCS#12 file. The advisory notes that exploitation requires processing untrusted PKCS#12 files, which is uncommon. The update includes multiple CVEs but does not explicitly list individual fixes. The updated container images should be deployed using the rhui-installer utility according to Red Hat's official documentation.

Detailed information about Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update affecting Red Hat Product Security Red Hat. Get real-tim

Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:4943

https://access.redhat.com/products/red-hat-update-infrastructure

https://access.redhat.com/security/cve/CVE-2025-11187

https://access.redhat.com/security/cve/CVE-2025-12084

https://access.redhat.com/security/cve/CVE-2025-13836

https://access.redhat.com/security/cve/CVE-2025-14104

https://access.redhat.com/security/cve/CVE-2025-15467

https://access.redhat.com/security/cve/CVE-2025-15468

https://access.redhat.com/security/cve/CVE-2025-15469

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-66199

https://access.redhat.com/security/cve/CVE-2025-68160

https://access.redhat.com/security/cve/CVE-2025-69418

https://access.redhat.com/security/cve/CVE-2025-69419

https://access.redhat.com/security/cve/CVE-2025-69420

https://access.redhat.com/security/cve/CVE-2025-69421

https://access.redhat.com/errata/RHSA-2026:6893

https://access.redhat.com/security/cve/CVE-2025-9086

https://access.redhat.com/security/cve/CVE-2025-10148

https://access.redhat.com/security/cve/CVE-2025-10966

https://access.redhat.com/security/cve/CVE-2025-15224

https://access.redhat.com/security/cve/CVE-2025-15079

https://access.redhat.com/security/cve/CVE-2025-14819

https://access.redhat.com/security/cve/CVE-2025-14524

https://access.redhat.com/security/cve/CVE-2025-13034

https://access.redhat.com/security/cve/CVE-2026-3805

https://access.redhat.com/security/cve/CVE-2026-3783

https://access.redhat.com/security/cve/CVE-2026-3784

https://access.redhat.com/security/cve/CVE-2026-1965

https://access.redhat.com/security/cve/CVE-2025-14017

https://access.redhat.com/errata/RHSA-2026:2485

https://access.redhat.com/security/cve/CVE-2025-13601

https://access.redhat.com/security/cve/CVE-2025-68973

https://access.redhat.com/security/cve/CVE-2026-22795

https://access.redhat.com/security/cve/CVE-2026-22796

https://access.redhat.com/errata/RHSA-2025:23125

2394750

https://access.redhat.com/errata/RHSA-2025:23043

https://access.redhat.com/errata/RHSA-2025:23126

Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update

gnutls

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

CVE-2025-9820 is a stack-based buffer overflow vulnerability in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function responsible for PKCS#11 token initialization. When a token label exceeding the expected length is processed, the function writes past the end of a fixed-size stack buffer, potentially causing application crashes or enabling local privilege escalation. This affects systems using GnuTLS on Red Hat Enterprise Linux 10 versions prior to 10.2. Red Hat has issued security advisories and released patched GnuTLS packages (version 3.8.10-3.el10_1 and later) to address this vulnerability.

Detailed information about CVE-2025-9820: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat Enterprise Linux 10. Get 

CVE-2025-9820: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9820: Stack-based Buffer Overflow


Red Hat Security Advisory: Red Hat Ceph StorageCVE-2025-9820 0 The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version. HighVulnerability#gcve #csaf #cve-2025-9820 Join the discussion	GCVE Database	03/24/2026, 10:00:07 UTC Added: 05/26/2026, 20:58:31 UTC
Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security updateCVE-2025-9086 0 Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version. HighVulnerability#gcve #csaf #cve-2025-9086 Join the discussion	GCVE Database	03/18/2026, 16:24:32 UTC Added: 05/26/2026, 20:58:12 UTC
CVE-2025-9820: Stack-based Buffer OverflowCVE-2025-9820 0 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks. MediumVulnerability#cve #cve-2025-9820 Join the discussion	CVE Database V5	01/26/2026, 19:58:32 UTC Added: 01/26/2026, 20:05:57 UTC

Threats Tagged 'cve-2025-9820'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-9820'

Lead Pen Test Professional