Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

Bleeping Computer

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

buildkit

Red Hat OpenShift Logging 6.6.1 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

A flaw in BuildKit allows a malicious BuildKit client or frontend to craft a specially designed request that crashes the BuildKit daemon, resulting in denial of service. Exploitation requires the ability to supply a build definition, such as a Dockerfile with a custom #syntax frontend. The vulnerability does not permit remote code execution or data leakage. The issue is fixed upstream in BuildKit 0.31.2. Red Hat has already shipped the fixed BuildKit version in Hardened Images (Buildah, Podman, Trivy) and is assessing other products for updates. The vulnerability is tracked as CVE-2026-15792 and is rated high severity by Red Hat.

Detailed information about Red Hat Security Advisory: Red Hat Quay 3.9.26 affecting Red Hat Product Security Red Hat. Get real-time updates, technical details, 

Red Hat Security Advisory: Red Hat Quay 3.9.26 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:65514

https://access.redhat.com/security/cve/CVE-2026-15792

https://access.redhat.com/security/cve/CVE-2026-16221

https://access.redhat.com/security/cve/CVE-2026-18255

https://access.redhat.com/security/cve/CVE-2026-32283

https://access.redhat.com/security/cve/CVE-2026-33818

https://access.redhat.com/security/cve/CVE-2026-44705

https://access.redhat.com/security/cve/CVE-2026-49477

https://access.redhat.com/security/cve/CVE-2026-56852

https://access.redhat.com/security/cve/CVE-2026-56853

https://access.redhat.com/security/cve/CVE-2026-56858

https://access.redhat.com/security/cve/CVE-2026-56859

https://access.redhat.com/security/cve/CVE-2026-56860

https://access.redhat.com/security/cve/CVE-2026-56862

https://access.redhat.com/security/cve/CVE-2026-67213

https://access.redhat.com/security/cve/CVE-2026-67214

https://access.redhat.com/security/cve/CVE-2026-67313

https://access.redhat.com/security/cve/CVE-2026-67314

https://access.redhat.com/security/cve/CVE-2026-67320

https://access.redhat.com/security/cve/CVE-2026-67321

https://access.redhat.com/errata/RHSA-2026:66084

https://access.redhat.com/security/cve/CVE-2026-69152

https://access.redhat.com/errata/RHSA-2026:66521

https://access.redhat.com/security/cve/CVE-2026-17106

https://access.redhat.com/security/cve/CVE-2026-18140

https://access.redhat.com/security/cve/CVE-2026-29181

https://access.redhat.com/security/cve/CVE-2026-35469

https://access.redhat.com/security/cve/CVE-2026-39828

https://access.redhat.com/security/cve/CVE-2026-39830

https://access.redhat.com/security/cve/CVE-2026-39831

https://access.redhat.com/security/cve/CVE-2026-39832

https://access.redhat.com/security/cve/CVE-2026-39835

https://access.redhat.com/security/cve/CVE-2026-41178

https://access.redhat.com/security/cve/CVE-2026-42508

https://access.redhat.com/security/cve/CVE-2026-46595

https://access.redhat.com/security/cve/CVE-2026-46597

https://access.redhat.com/security/cve/CVE-2026-46604

https://access.redhat.com/errata/RHSA-2026:66523

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.1

aws-smithy-json

CVE-2026-18140 is a high-severity denial of service vulnerability in the aws-smithy-json runtime crate before version 0.62.7. It involves uncontrolled recursion triggered by deeply nested JSON in the unknown-key skip path of smithy-rs generated struct deserializers. Remote unauthenticated attackers can exploit this by sending a single HTTP request with crafted JSON to exhaust the stack and cause process abort. AWS manages remediation for this cloud-hosted service, and users should upgrade to version 0.62.7 or later and rebuild to mitigate the risk.

This vulnerability (CVE-2026-18140) affects aws-smithy-json versions prior to 0.62.7. It is caused by uncontrolled recursion in the unknown-key skip path used by smithy-rs generated struct deserializers. When processing deeply nested JSON, this flaw can lead to stack exhaustion and process abort, resulting in a denial of service. The vulnerability can be triggered remotely without authentication via a single HTTP request containing crafted JSON. AWS provides a fix in version 0.62.7 and manages remediation for the cloud-hosted service.

Detailed information about CVE-2026-18140: CWE-674: Uncontrolled Recursion in AWS aws-smithy-json affecting AWS aws-smithy-json. Get real-time updates, technica

CVE-2026-18140: CWE-674: Uncontrolled Recursion in AWS aws-smithy-json - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-18140: CWE-674: Uncontrolled Recursion in AWS aws-smithy-json


Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.1CVE-2026-15792 0 Red Hat OpenShift Logging 6.6.1 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs. HighVulnerability#gcve #csaf #cve-2026-15792 Join the discussion	GCVE Database	09/10/2026, 16:42:04 UTC Added: 09/09/2026, 13:28:58 UTC
CVE-2026-18140: CWE-674: Uncontrolled Recursion in AWS aws-smithy-jsonCVE-2026-18140 0 CVE-2026-18140 is a high-severity denial of service vulnerability in the aws-smithy-json runtime crate before version 0.62.7. It involves uncontrolled recursion triggered by deeply nested JSON in the unknown-key skip path of smithy-rs generated struct deserializers. Remote unauthenticated attackers can exploit this by sending a single HTTP request with crafted JSON to exhaust the stack and cause process abort. AWS manages remediation for this cloud-hosted service, and users should upgrade to version 0.62.7 or later and rebuild to mitigate the risk. HighVulnerability#cve #cve-2026-18140 #cwe-674 Join the discussion	CVE Database V5	08/20/2026, 21:35:57 UTC Added: 07/30/2026, 19:23:17 UTC

Threats Tagged 'cve-2026-18140'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-18140'

Lead Pen Test Professional