Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

x509

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

The Go standard library's crypto/x509 package relies on system root certificates for verifying TLS certificates. However, on certain platforms or scenarios, system trust stores may not be updated promptly, leading to acceptance of revoked or untrustworthy intermediate certificates. To address this, the Go maintainers introduced a denylist mechanism in crypto/x509 that returns an error during certificate verification if the certificate chain includes any known intermediate certificates that have been revoked or are no longer trusted. This vulnerability is tracked as CVE-2026-111943 and is categorized under CWE-299 (Improper Check for Certificate Revocation).

CVE-2026-111943 is a vulnerability in the Go standard library's crypto/x509 package related to improper checking of certificate revocation. In some cases, system trust stores may not be updated automatically, potentially allowing untrustworthy intermediate certificates to be accepted. To mitigate th

CVE-2026-111943: CWE-299: Improper Check for Certificate Revocation in Go standard library crypto/x509

golang-1.10

golang-1.6

golang-1.13

golang-1.18

golang-1.16

golang-1.8

golang-1.9

golang-1.14

golang-1.20

golang-1.21

golang-1.22

golang-1.17

golang-1.23

golang-1.24

golang-1.25

golang-1.26

golang-1.27

CVE-2026-78667 is a denial of service vulnerability in Golang's FileServer(FS), ServeContent, and ServeFile(FS) functions. It occurs when parsing a Range header containing a large number of small ranges, causing excessive CPU consumption and potentially exhausting server resources. This vulnerability affects availability but does not impact confidentiality or integrity. The CVSS score is 7.5 (medium severity).

The vulnerability CVE-2026-78667 affects Golang's FileServer(FS), ServeContent, and ServeFile(FS) components. When these functions parse an HTTP Range header that contains many small ranges, they can consume excessive CPU resources. This excessive resource consumption can lead to a denial of service condition by exhausting server availability. The vulnerability does not affect confidentiality or integrity of data. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact.

CVE-2026-78667 is a vulnerability in FileServer(FS), ServeContent, and ServeFile(FS) where parsing a Range header with many small ranges causes excessive CPU consumption. This can lead to a denial of service condition by exhausting server resources. The vulnerability does not impact confidentiality 


CVE-2026-111943: CWE-299: Improper Check for Certificate Revocation in Go standard library crypto/x509CVE-2026-111943 0 On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. MediumVulnerability#cve #cve-2026-111943 #cwe-299 Join the discussion	CVE Database V5	10/21/2026, 00:52:18 UTC Added: 10/21/2026, 01:19:07 UTC
Red Hat Security Advisory: golang security, bug fix, and enhancement updateCVE-2026-78667 0 CVE-2026-78667 is a denial of service vulnerability in Golang's FileServer(FS), ServeContent, and ServeFile(FS) functions. It occurs when parsing a Range header containing a large number of small ranges, causing excessive CPU consumption and potentially exhausting server resources. This vulnerability affects availability but does not impact confidentiality or integrity. The CVSS score is 7.5 (medium severity). HighVulnerability#gcve #osv #ghsa-f4xw-m386-m277 Join the discussion	GCVE Database	10/20/2026, 20:30:32 UTC Added: 10/09/2026, 22:44:41 UTC

Threats Tagged 'cve-2026-111943'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-111943'

Lead Pen Test Professional