Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 2.25.7 provides these changes:

CVE-2025-14813 is a cryptographic vulnerability in the BC-JAVA bcprov library's GOSTCTR implementation used by Red Hat products including OpenShift Dev Spaces. The GOSTCTR cipher reuses keystream after encrypting more than 255 blocks, violating fundamental confidentiality guarantees. An attacker who captures ciphertext encrypted beyond this limit can perform cryptanalysis to recover plaintext data. The vulnerability impacts confidentiality but not integrity or availability. Red Hat's advisory highlights the need to limit encryption payload size or transition to a secure authenticated encryption mode. No explicit patch or fix is currently provided; mitigation is procedural.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. affecting Red Hat Product Security Red Hat. 

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:24977

https://access.redhat.com/security/cve/CVE-2025-14813

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2026-1462

https://access.redhat.com/security/cve/CVE-2026-23490

https://access.redhat.com/security/cve/CVE-2026-24747

https://access.redhat.com/security/cve/CVE-2026-25048

https://access.redhat.com/security/cve/CVE-2026-25960

https://access.redhat.com/security/cve/CVE-2026-27489

https://access.redhat.com/security/cve/CVE-2026-27893

https://access.redhat.com/security/cve/CVE-2026-28500

https://access.redhat.com/security/cve/CVE-2026-28684

https://access.redhat.com/security/cve/CVE-2026-29063

https://access.redhat.com/security/cve/CVE-2026-29074

https://access.redhat.com/security/cve/CVE-2026-31958

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/errata/RHSA-2026:17668

https://access.redhat.com/security/updates/classification/#critical

2444320

2449290

2451409

2452453

2452456

2455916

2456519

2458187

2458634

2458638

2458640

2458641

2460003

2463172

2463173

2463177

2463178

2463179

https://access.redhat.com/errata/RHSA-2026:21772

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2026-0636

https://access.redhat.com/security/cve/CVE-2026-1525

https://access.redhat.com/security/cve/CVE-2026-1526

https://access.redhat.com/security/cve/CVE-2026-1528

https://access.redhat.com/security/cve/CVE-2026-1605

https://access.redhat.com/security/cve/CVE-2026-2229

https://access.redhat.com/security/cve/CVE-2026-2327

https://access.redhat.com/security/cve/CVE-2026-26996

https://access.redhat.com/security/cve/CVE-2026-27904

https://access.redhat.com/security/cve/CVE-2026-30827

https://access.redhat.com/security/cve/CVE-2026-31802

https://access.redhat.com/security/cve/CVE-2026-32141

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-32305

https://access.redhat.com/errata/RHSA-2026:18054

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index

https://access.redhat.com/articles/7134190

2337621

2441268

2442671

2442908

2442922

2458635

https://access.redhat.com/errata/RHSA-2026:18055

https://access.redhat.com/errata/RHSA-2026:18059

https://access.redhat.com/articles/7137769

JBEAP-29032

https://access.redhat.com/errata/RHSA-2026:11720

https://access.redhat.com/products/quarkus/

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.20.6.SP1

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20

Canonical URL

https://access.redhat.com/security/updates/classification#important

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.broker&version=7.13.5

https://docs.redhat.com/en/documentation/red_hat_amq_broker/7.13

2445449

2445451

https://access.redhat.com/errata/RHSA-2026:53644

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index

2467540

2477217

2477220

2477224

2477226

Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AI

bcprov-jdk15on

bcprov

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).

 This vulnerability is associated with program files LDAPStoreHelper.



This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

CVE-2026-0636 is a medium severity LDAP injection vulnerability (CWE-90) in the BC-JAVA bcprov library by Legion of the Bouncy Castle Inc., specifically in the LDAPStoreHelper.java implementation. The vulnerability occurs because the LDAPStoreHelper fails to properly neutralize special LDAP characters in user-supplied input before incorporating it into LDAP queries. This allows an attacker who can supply crafted input to an application using LDAPStoreHelper to modify LDAP search filters, potentially bypassing search restrictions and manipulating directory results. The primary impact is loss of confidentiality and integrity of directory data, which could lead to unauthorized access or privilege escalation. The vulnerability affects BC-JAVA versions from 1.74 up to but not including 1.80.2, from 1.81 up to but not including 1.81.1, and from 1.82 up to but not including 1.84. Red Hat has released a security update in JBoss Enterprise Application Platform 8.1.6 for RHEL 8 that includes a fix for this issue. The recommended mitigation is to sanitize or escape LDAP special characters such as asterisks, parentheses, and backslashes in user input before passing it to LDAPStoreHelper.

Detailed information about CVE-2026-0636: CWE-90 Improper neutralization of special elements used in an LDAP query ('LDAP injection') in Legion of the Bouncy Ca

CVE-2026-0636: CWE-90 Improper neutralization of special elements used in an LDAP query ('LDAP injection') in Legion of the Bouncy Castle Inc. BC-JAVA - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0636: CWE-90 Improper neutralization of special elements used in an LDAP query ('LDAP injection') in Legion of the Bouncy Castle Inc. BC-JAVA


Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AICVE-2025-14813 0 Release of RHOAI 2.25.7 provides these changes: HighVulnerability#gcve #csaf #cve-2025-14813 Join the discussion	GCVE Database	06/10/2026, 04:27:13 UTC Added: 05/26/2026, 20:58:00 UTC
CVE-2026-0636: CWE-90 Improper neutralization of special elements used in an LDAP query ('LDAP injection') in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-0636 0 Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84. MediumVulnerability#cve #cve-2026-0636 #cwe-90 Join the discussion	CVE Database V5	04/15/2026, 08:59:12 UTC Added: 04/15/2026, 09:31:59 UTC

Threats Tagged 'cve-2026-0636'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0636'

Lead Pen Test Professional