Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads

CVE-2025-12638 is a path traversal vulnerability in Keras, impacting the Red Hat Trusted Artifact Signer (RHTAS) Model Transparency CLI image. The issue arises because the tarfile.extractall() function is called without the security-critical filter='data' parameter. Although Keras attempts to filter unsafe paths before extraction, a symlink resolution bug triggered by path length limits (PATH_MAX) causes the filtering to be bypassed during extraction. This allows an attacker to write files outside the intended directory, potentially modifying or creating critical files, reading sensitive data, or causing denial of service. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), CWE-770, and CWE-409. Red Hat has not released a patch or fix for this vulnerability in the affected RHTAS 1.3.2 Tech Preview release, and mitigation options currently do not meet Red Hat's criteria for ease of use, applicability, or stability.

Detailed information about Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release of Model Transparency affecting Red Hat Product Security Red Hat. Get r

Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release of Model Transparency - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:4271

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index

https://access.redhat.com/security/cve/CVE-2025-12638

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2026-0897

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/security/cve/CVE-2026-24049

https://access.redhat.com/security/updates/classification/

Canonical URL

Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release of Model Transparency

Release of RHOAI 3.3 provides these changes:

A local privilege escalation vulnerability (CVE-2024-25621) exists in containerd due to overly permissive default directory permissions. Local users on the host can access the metadata store, content store, and Kubernetes local volumes, potentially exploiting setuid binaries to elevate privileges. The vulnerability affects Red Hat OpenShift AI 3.3 and other related Red Hat products that include containerd components. Red Hat has provided updated container images and documented manual mitigation steps involving restricting directory permissions or running containerd in rootless mode.

Detailed information about Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, techni

Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:3713

https://access.redhat.com/security/cve/CVE-2024-25621

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-14180

https://access.redhat.com/security/cve/CVE-2025-14920

https://access.redhat.com/security/cve/CVE-2025-14921

https://access.redhat.com/security/cve/CVE-2025-14922

https://access.redhat.com/security/cve/CVE-2025-14924

https://access.redhat.com/security/cve/CVE-2025-14925

https://access.redhat.com/security/cve/CVE-2025-14926

https://access.redhat.com/security/cve/CVE-2025-14927

https://access.redhat.com/security/cve/CVE-2025-14928

https://access.redhat.com/security/cve/CVE-2025-14929

https://access.redhat.com/security/cve/CVE-2025-14930

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-52881

https://access.redhat.com/security/cve/CVE-2025-59425

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/errata/RHSA-2026:25127

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2025-68151

https://access.redhat.com/security/cve/CVE-2026-25679

https://access.redhat.com/security/cve/CVE-2026-26017

https://access.redhat.com/security/cve/CVE-2026-26018

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/security/cve/CVE-2026-32936

https://access.redhat.com/security/cve/CVE-2026-33186

https://access.redhat.com/security/cve/CVE-2026-34986

https://access.redhat.com/security/cve/CVE-2026-35579

https://access.redhat.com/errata/RHSA-2026:37387

https://access.redhat.com/security/cve/CVE-2024-40635

https://access.redhat.com/security/cve/CVE-2024-45310

https://access.redhat.com/security/cve/CVE-2025-21613

https://access.redhat.com/security/cve/CVE-2025-21614

https://access.redhat.com/security/cve/CVE-2025-22870

https://access.redhat.com/security/cve/CVE-2025-47911

https://access.redhat.com/security/cve/CVE-2025-54410

https://access.redhat.com/security/cve/CVE-2025-58058

https://access.redhat.com/security/cve/CVE-2025-64329

https://access.redhat.com/security/cve/CVE-2025-66506

https://access.redhat.com/security/cve/CVE-2025-8766

https://access.redhat.com/security/cve/CVE-2026-22772

https://access.redhat.com/security/cve/CVE-2026-23831

https://access.redhat.com/security/cve/CVE-2026-24117

https://access.redhat.com/security/cve/CVE-2026-25680

https://access.redhat.com/security/cve/CVE-2026-25681

https://access.redhat.com/security/cve/CVE-2026-25934

https://access.redhat.com/errata/RHSA-2026:2343

https://access.redhat.com/security/cve/CVE-2025-58183

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore

https://access.redhat.com/errata/RHSA-2025:23248

https://access.redhat.com/security/cve/CVE-2025-47907

https://access.redhat.com/security/cve/CVE-2025-59375

https://access.redhat.com/security/cve/CVE-2025-6965

https://access.redhat.com/security/cve/CVE-2025-9648

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.7/html-single/release_notes/index#about-this-release-479_release-notes-47

https://access.redhat.com/errata/RHSA-2026:2456

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.26/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-65945

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66490

https://access.redhat.com/security/cve/CVE-2026-22029

https://access.redhat.com/errata/RHSA-2026:51033

https://access.redhat.com/security/cve/CVE-2026-27136

https://access.redhat.com/security/cve/CVE-2026-32281

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-33747

https://access.redhat.com/security/cve/CVE-2026-33748

https://access.redhat.com/security/cve/CVE-2026-33810

https://access.redhat.com/security/cve/CVE-2026-33811

https://access.redhat.com/security/cve/CVE-2026-39820

https://access.redhat.com/security/cve/CVE-2026-39821

https://access.redhat.com/errata/RHSA-2026:2900

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2026-23745

https://access.redhat.com/security/cve/CVE-2026-24842

https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html

https://access.redhat.com/errata/RHSA-2025:23428

https://access.redhat.com/errata/RHSA-2025:22955

https://access.redhat.com/security/cve/CVE-2025-47913

https://catalog.redhat.com/software/containers/search

https://access.redhat.com/errata/RHSA-2025:23644

Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI

keras

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.

This vulnerability (CVE-2026-0897) affects Google Keras versions 3.0.0 through 3.13.0 on all platforms. The issue lies in the HDF5 weight loading component where resource allocation is not limited or throttled. An attacker can supply a specially crafted .keras archive containing a model.weights.h5 file with a dataset declaring an extremely large shape. This causes excessive memory allocation leading to exhaustion and a crash of the Python interpreter, resulting in a denial of service condition. The CVSS 4.0 base score is 7.1, indicating high severity. There are no known exploits in the wild. Red Hat has published advisories referencing this CVE, but no explicit patch or fix details are provided in the advisory content.

Detailed information about CVE-2026-0897: CWE-770 Allocation of Resources Without Limits or Throttling in Google Keras affecting Google Keras. Get real-time upd

CVE-2026-0897: CWE-770 Allocation of Resources Without Limits or Throttling in Google Keras - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0897: CWE-770 Allocation of Resources Without Limits or Throttling in Google Keras


Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release of Model TransparencyCVE-2025-12638 0 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads HighVulnerability#gcve #csaf #cve-2025-12638 Join the discussion	GCVE Database	03/11/2026, 09:02:58 UTC Added: 05/26/2026, 20:58:18 UTC
Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AICVE-2024-25621 0 Release of RHOAI 3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2024-25621 Join the discussion	GCVE Database	03/04/2026, 07:18:30 UTC Added: 05/26/2026, 20:58:12 UTC
CVE-2026-0897: CWE-770 Allocation of Resources Without Limits or Throttling in Google KerasCVE-2026-0897 0 Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape. HighVulnerability#cve #cve-2026-0897 #cwe-770 Join the discussion	CVE Database V5	01/15/2026, 14:09:53 UTC Added: 01/15/2026, 14:18:13 UTC

Threats Tagged 'cve-2026-0897'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0897'

Lead Pen Test Professional