Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This update includes the following RPMs:

glib2:
  * glib2-2.88.0-1.1.hum1 (aarch64, x86_64)
  * glib2-devel-2.88.0-1.1.hum1 (aarch64, x86_64)
  * glib2-doc-2.88.0-1.1.hum1 (aarch64, x86_64)
  * glib2-static-2.88.0-1.1.hum1 (aarch64, x86_64)
  * glib2-tests-2.88.0-1.1.hum1 (aarch64, x86_64)
  * glib2-2.88.0-1.1.hum1.src (src)

The vulnerability (CVE-2025-13601) involves an integer overflow in the g_escape_uri_string() function of the glib2 library, causing a heap-based buffer overflow due to incorrect buffer size calculation when escaping strings with many characters needing escaping. This can result in memory corruption, crashes, or potentially arbitrary code execution. The Red Hat advisory RHSA-2026:7461 updates glib2 RPM packages (version 2.88.0-1.1.hum1) for aarch64 and x86_64 architectures as part of a bug fix and enhancement update for Red Hat Hardened Images. The advisory references multiple related CVEs but does not explicitly confirm a fix for CVE-2025-13601 or others. Mitigation options are either unavailable or insufficient per Red Hat's criteria. The vulnerability is categorized under CWE-190 (Integer Overflow or Wraparound) and has a Red Hat CVSS v3 score of 7.7 (High impact) though no official CVSS score is provided in this advisory.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7461

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-13601

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2025-14512

https://access.redhat.com/security/cve/CVE-2025-14087

https://access.redhat.com/security/cve/CVE-2025-7039

https://access.redhat.com/security/cve/CVE-2026-0988

Canonical URL

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

This vulnerability arises from improper validation of input parameters in the g_buffered_input_stream_peek() function within the glib2 library used by Red Hat Hardened Images. Specifically, the offset and count parameters are not validated, allowing an integer overflow during length calculation. When exploited with specially crafted values, this overflow causes memcpy() to receive an incorrect size argument, triggering a buffer overflow. The primary impact is application crashes leading to denial of service conditions. The CVSS v3.1 base score is 3.7 (low severity) with network attack vector, high attack complexity, no privileges required, no user interaction, and impact limited to availability.

Detailed information about CVE-2026-0988: Integer Overflow or Wraparound in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat Enterprise Linux 10. G

CVE-2026-0988: Integer Overflow or Wraparound in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0988: Integer Overflow or Wraparound in Red Hat Red Hat Hardened Images


Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2025-7039 0 This update includes the following RPMs: glib2: * glib2-2.88.0-1.1.hum1 (aarch64, x86_64) * glib2-devel-2.88.0-1.1.hum1 (aarch64, x86_64) * glib2-doc-2.88.0-1.1.hum1 (aarch64, x86_64) * glib2-static-2.88.0-1.1.hum1 (aarch64, x86_64) * glib2-tests-2.88.0-1.1.hum1 (aarch64, x86_64) * glib2-2.88.0-1.1.hum1.src (src) MediumVulnerability#gcve #csaf #cve-2025-7039 Join the discussion	GCVE Database	04/10/2026, 19:54:09 UTC Added: 06/10/2026, 21:23:11 UTC
CVE-2026-0988: Integer Overflow or Wraparound in Red Hat Red Hat Hardened ImagesCVE-2026-0988 0 A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS). LowVulnerability#cve #cve-2026-0988 Join the discussion	CVE Database V5	01/21/2026, 11:38:39 UTC Added: 01/21/2026, 11:51:12 UTC

Threats Tagged 'cve-2026-0988'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0988'

Lead Pen Test Professional