Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 3.3.3 provides these changes:

CVE-2025-6242 is a vulnerability in the node-forge library used by Red Hat OpenShift AI and other Red Hat products. It involves an interpretation conflict in ASN.1 structure parsing that allows unauthenticated attackers to bypass downstream cryptographic verification and security decisions by crafting malicious ASN.1 data. This leads to semantic divergence in schema validation. The vulnerability is rated important by Red Hat with a CVSS v3 base score of 8.7 (Red Hat rating). It affects cryptographic integrity and confidentiality but does not impact availability. Red Hat has not provided a patch or mitigation that meets their standards for deployment and stability. Updated Red Hat OpenShift AI images (3.3.3) are available, but no direct fix for this CVE is included. Red Hat continues to investigate and may provide fixes in future updates.

Detailed information about Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:19712

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-59057

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-62164

https://access.redhat.com/security/cve/CVE-2025-6242

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66448

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-69223

https://access.redhat.com/security/cve/CVE-2025-69873

https://access.redhat.com/security/cve/CVE-2026-0846

https://access.redhat.com/security/cve/CVE-2026-0847

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/errata/RHSA-2026:10184

https://access.redhat.com/security/cve/CVE-2025-11157

https://access.redhat.com/security/cve/CVE-2025-12103

https://access.redhat.com/security/cve/CVE-2025-14009

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-68131

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2025-69534

https://access.redhat.com/security/cve/CVE-2026-1002

https://access.redhat.com/security/cve/CVE-2026-22773

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI

nltk

A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by providing absolute paths or traversal paths. This vulnerability can be exploited locally or remotely, particularly in scenarios where the function is used in web APIs or other interfaces that accept user-supplied input.

The vulnerability CVE-2026-0846 in nltk version 3.9.2 arises from the filestring() function in the nltk.util module not sanitizing user-supplied file paths. This allows attackers to specify absolute or directory traversal paths, leading to arbitrary file read access. The CVSS 3.0 score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability. The vulnerability is documented by Red Hat advisories, but no explicit patch or fix version is stated in the provided data.

Detailed information about CVE-2026-0846: CWE-36 Absolute Path Traversal in nltk nltk/nltk affecting nltk nltk/nltk. Get real-time updates, technical details, a

CVE-2026-0846: CWE-36 Absolute Path Traversal in nltk nltk/nltk - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0846: CWE-36 Absolute Path Traversal in nltk nltk/nltk


Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AICVE-2025-6242 0 Release of RHOAI 3.3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2025-6242 Join the discussion	GCVE Database	05/20/2026, 15:49:06 UTC Added: 05/26/2026, 20:57:56 UTC
CVE-2026-0846: CWE-36 Absolute Path Traversal in nltk nltk/nltkCVE-2026-0846 0 A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by providing absolute paths or traversal paths. This vulnerability can be exploited locally or remotely, particularly in scenarios where the function is used in web APIs or other interfaces that accept user-supplied input. HighVulnerability#cve #cve-2026-0846 #cwe-36 Join the discussion	CVE Database V5	03/09/2026, 19:19:09 UTC Added: 03/09/2026, 19:34:17 UTC

Threats Tagged 'cve-2026-0846'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0846'

Lead Pen Test Professional