Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

packetbeat

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

CVE-2026-0529 is a vulnerability classified under CWE-129 (Improper Validation of Array Index) found in the MongoDB protocol parser component of Elastic Packetbeat, a network packet analyzer used for monitoring and analyzing network traffic. The flaw arises because the parser does not properly validate array indices when processing MongoDB protocol payloads. An attacker can exploit this by sending specially crafted malformed MongoDB network packets to a monitored interface where Packetbeat is configured to parse MongoDB traffic. This malformed input triggers a buffer overflow condition (CAPEC-100), which can cause Packetbeat to crash or behave unpredictably, resulting in a denial of service (DoS) condition. The vulnerability has a CVSS v3.1 base score of 6.5, indicating medium severity, with the vector AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. This means the attack requires adjacent network access (e.g., same LAN or VPN), has low attack complexity, requires no privileges or user interaction, and impacts availability only. The vulnerability affects multiple versions of Packetbeat (7.0.0, 8.0.0, 9.0.0, 9.2.0). As of the publication date, no patches or fixes have been released, and no known exploits are reported in the wild. The flaw primarily impacts the availability of Packetbeat services monitoring MongoDB traffic, potentially disrupting network monitoring and security visibility.

Detailed information about CVE-2026-0529: CWE-129 Improper Validation of Array Index in Elastic Packetbeat affecting Elastic Packetbeat. Get real-time updates, 

CVE-2026-0529: CWE-129 Improper Validation of Array Index in Elastic Packetbeat - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0529: CWE-129 Improper Validation of Array Index in Elastic Packetbeat

Threats Tagged 'cve-2026-0529'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0529'

Lead Pen Test Professional