Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

rhdh-hub-rhel9

Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.

The vulnerability CVE-2026-2950 affects Lodash functions _.unset and _.omit by allowing prototype pollution via array-wrapped path segments, bypassing security checks. This enables deletion of built-in JavaScript prototype properties, potentially leading to application instability or denial of service. The issue is present in Red Hat Developer Hub 1.10.0 and associated packages such as nodejs20 and yarnpkg. Red Hat has not provided an official patch or remediation that meets their standards for ease of use, applicability, and stability. The advisory references multiple related CVEs and CWE identifiers including CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes).

Detailed information about Red Hat Security Advisory: Red Hat Developer Hub 1.10.0 release. affecting Red Hat Product Security Red Hat. Get real-time updates, t

Red Hat Security Advisory: Red Hat Developer Hub 1.10.0 release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7655

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-2950

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-45149

https://access.redhat.com/security/cve/CVE-2026-45736

https://access.redhat.com/security/cve/CVE-2026-59870

https://access.redhat.com/security/cve/CVE-2026-59868

Canonical URL

https://access.redhat.com/errata/RHSA-2026:24841

https://access.redhat.com/security/cve/CVE-2026-22036

https://access.redhat.com/security/cve/CVE-2026-27601

https://access.redhat.com/security/cve/CVE-2026-31988

https://access.redhat.com/security/cve/CVE-2026-32235

https://access.redhat.com/security/cve/CVE-2026-33349

https://access.redhat.com/security/cve/CVE-2026-4923

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://issues.redhat.com/browse/RHDHBUGS-2870

https://issues.redhat.com/browse/RHDHBUGS-2962

https://issues.redhat.com/browse/RHDHBUGS-2964

https://issues.redhat.com/browse/RHDHBUGS-2965

https://issues.redhat.com/browse/RHDHBUGS-2966

https://issues.redhat.com/browse/RHDHBUGS-2971

https://issues.redhat.com/browse/RHDHBUGS-2974

https://access.redhat.com/errata/RHSA-2026:9455

https://access.redhat.com/security/cve/CVE-2026-8723

https://access.redhat.com/security/cve/CVE-2026-48618

https://access.redhat.com/security/cve/CVE-2026-48933

https://access.redhat.com/security/cve/CVE-2026-48615

https://access.redhat.com/security/cve/CVE-2026-48936

https://access.redhat.com/security/cve/CVE-2026-48934

https://access.redhat.com/security/cve/CVE-2026-48928

https://access.redhat.com/security/cve/CVE-2026-48930

https://access.redhat.com/security/cve/CVE-2026-48619

https://access.redhat.com/security/cve/CVE-2026-48935

Red Hat Security Advisory: Red Hat Developer Hub 1.10.0 release.

undici

CVE-2026-22036 is a medium severity vulnerability in the Node.js HTTP client library undici, affecting versions prior to 6.23.0 and between 7.0.0 and 7.18.2. The flaw arises from an unbounded decompression chain during HTTP response processing, allowing a malicious server to trigger excessive CPU and memory consumption by inserting thousands of compression steps. This resource exhaustion can lead to denial of service without requiring authentication or user interaction.

CVE-2026-22036 is a vulnerability classified under CWE-770 (Allocation of Resources Without Limits or Throttling) found in the undici HTTP/1.1 client library for Node.js. The issue exists in undici versions prior to 6.23.0 and between 7.0.0 and 7.18.2, where the decompression chain length is unbounded when processing HTTP responses. Specifically, the default maxHeaderSize setting allows a malicious HTTP server to craft responses with thousands of compression steps, causing the client to allocate excessive memory and consume high CPU resources during decompression. This leads to a denial-of-service (DoS) condition by exhausting system resources. The vulnerability does not impact confidentiality or integrity but severely affects availability. Exploitation requires no authentication or user interaction and can be triggered remotely by connecting to a malicious or compromised HTTP server. The vulnerability was publicly disclosed on January 14, 2026, with a CVSS v3.1 base score of 5.9 (medium severity), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. The issue is resolved in undici versions 6.23.0 and 7.18.2 by introducing limits on the decompression chain length and improving resource management during decompression.

Detailed information about CVE-2026-22036: CWE-770: Allocation of Resources Without Limits or Throttling in nodejs undici affecting nodejs undici. Get real-time

CVE-2026-22036: CWE-770: Allocation of Resources Without Limits or Throttling in nodejs undici - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22036: CWE-770: Allocation of Resources Without Limits or Throttling in nodejs undici


Red Hat Security Advisory: Red Hat Developer Hub 1.10.0 release.CVE-2026-2950 0 Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins. MediumVulnerability#gcve #csaf #cve-2026-2950 Join the discussion	GCVE Database	06/09/2026, 14:38:34 UTC Added: 06/10/2026, 11:50:14 UTC
CVE-2026-22036: CWE-770: Allocation of Resources Without Limits or Throttling in nodejs undiciCVE-2026-22036 0 CVE-2026-22036 is a medium severity vulnerability in the Node.js HTTP client library undici, affecting versions prior to 6.23.0 and between 7.0.0 and 7.18.2. The flaw arises from an unbounded decompression chain during HTTP response processing, allowing a malicious server to trigger excessive CPU and memory consumption by inserting thousands of compression steps. This resource exhaustion can lead to denial of service without requiring authentication or user interaction. MediumVulnerabilityGermanyFranceNetherlands+3#cve #cve-2026-22036 #cwe-770 Join the discussion	CVE Database V5	01/14/2026, 19:07:13 UTC Added: 01/14/2026, 19:17:45 UTC

Threats Tagged 'cve-2026-22036'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-22036'

Lead Pen Test Professional