Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs including an update to grafana12.4 packages. Among multiple CVEs addressed is CVE-2026-84961, a high severity vulnerability in the undici BalancedPool component that allows remote attackers to bypass TLS certificate validation due to improper handling of custom certificate validation functions. This could lead to acceptance of untrusted certificates, compromising secure communications. The advisory provides updated RPMs to fix these issues.

The advisory covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically including grafana12.4 version 12.4.10-0.2.hum1 for aarch64 and x86_64 architectures. One notable vulnerability fixed is CVE-2026-84961, which affects the undici BalancedPool component by silently discarding custom TLS certificate validation functions, allowing remote attackers to bypass certificate validation. This flaw can cause the product to accept malicious or spoofed certificates, undermining the integrity and authentication of secure connections. The update addresses this and multiple other CVEs listed in the advisory.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:66008

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-84961

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-19534

https://access.redhat.com/security/cve/CVE-2026-18540

https://access.redhat.com/security/cve/CVE-2026-84933

https://access.redhat.com/security/cve/CVE-2026-18149

https://access.redhat.com/security/cve/CVE-2026-84947

https://access.redhat.com/security/cve/CVE-2026-85008

https://access.redhat.com/security/cve/CVE-2026-84890

https://access.redhat.com/security/cve/CVE-2026-85014

https://access.redhat.com/security/cve/CVE-2026-14199

https://access.redhat.com/security/cve/CVE-2026-28378

https://access.redhat.com/security/cve/CVE-2026-19197

Canonical URL

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This update includes the following RPMs:

grafana12.4:
  * grafana12.4-12.4.10-0.2.hum1 (aarch64, x86_64)
  * grafana12.4-12.4.10-0.2.hum1.src (src)

This Red Hat security advisory covers multiple vulnerabilities affecting Red Hat Hardened Images RPMs, specifically nodejs24 and associated packages. One notable vulnerability, CVE-2026-85152, is a flaw in the undici HTTP client where the cache or deduplicate interceptor omits the destination origin from cache and request-deduplication keys. This omission allows remote attackers to perform cross-origin cache poisoning, potentially leading to information disclosure and authentication bypass. The advisory lists five CVEs but does not provide detailed patch information or affected versions. Red Hat provides updated RPM packages as part of this advisory but does not explicitly confirm that these updates fully remediate all listed vulnerabilities.

https://access.redhat.com/errata/RHSA-2026:54438

https://access.redhat.com/security/cve/CVE-2026-85152

https://access.redhat.com/security/cve/CVE-2026-48932


Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2026-14199 0 Red Hat has issued a security advisory for Red Hat Hardened Images RPMs including an update to grafana12.4 packages. Among multiple CVEs addressed is CVE-2026-84961, a high severity vulnerability in the undici BalancedPool component that allows remote attackers to bypass TLS certificate validation due to improper handling of custom certificate validation functions. This could lead to acceptance of untrusted certificates, compromising secure communications. The advisory provides updated RPMs to fix these issues. HighVulnerability#gcve #csaf #cve-2026-14199 Join the discussion	GCVE Database	09/09/2026, 13:42:29 UTC Added: 09/10/2026, 22:04:40 UTC
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2026-18149 0 This update includes the following RPMs: grafana12.4: * grafana12.4-12.4.10-0.2.hum1 (aarch64, x86_64) * grafana12.4-12.4.10-0.2.hum1.src (src) HighVulnerability#gcve #csaf #cve-2026-18149 Join the discussion	GCVE Database	09/09/2026, 13:42:29 UTC Added: 09/06/2026, 14:18:08 UTC

Threats Tagged 'cve-2026-18540'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-18540'

Lead Pen Test Professional