Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 2.25.7 provides these changes:

CVE-2025-14813 is a cryptographic vulnerability in the BC-JAVA bcprov library's GOSTCTR implementation used by Red Hat products including OpenShift Dev Spaces. The GOSTCTR cipher reuses keystream after encrypting more than 255 blocks, violating fundamental confidentiality guarantees. An attacker who captures ciphertext encrypted beyond this limit can perform cryptanalysis to recover plaintext data. The vulnerability impacts confidentiality but not integrity or availability. Red Hat's advisory highlights the need to limit encryption payload size or transition to a secure authenticated encryption mode. No explicit patch or fix is currently provided; mitigation is procedural.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. affecting Red Hat Product Security Red Hat. 

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:24977

https://access.redhat.com/security/cve/CVE-2025-14813

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2026-1462

https://access.redhat.com/security/cve/CVE-2026-23490

https://access.redhat.com/security/cve/CVE-2026-24747

https://access.redhat.com/security/cve/CVE-2026-25048

https://access.redhat.com/security/cve/CVE-2026-25960

https://access.redhat.com/security/cve/CVE-2026-27489

https://access.redhat.com/security/cve/CVE-2026-27893

https://access.redhat.com/security/cve/CVE-2026-28500

https://access.redhat.com/security/cve/CVE-2026-28684

https://access.redhat.com/security/cve/CVE-2026-29063

https://access.redhat.com/security/cve/CVE-2026-29074

https://access.redhat.com/security/cve/CVE-2026-31958

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/errata/RHSA-2026:17668

https://access.redhat.com/security/updates/classification/#critical

2444320

2449290

2451409

2452453

2452456

2455916

2456519

2458187

2458634

2458638

2458640

2458641

2460003

2463172

2463173

2463177

2463178

2463179

https://access.redhat.com/errata/RHSA-2026:21772

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2026-0636

https://access.redhat.com/security/cve/CVE-2026-1525

https://access.redhat.com/security/cve/CVE-2026-1526

https://access.redhat.com/security/cve/CVE-2026-1528

https://access.redhat.com/security/cve/CVE-2026-1605

https://access.redhat.com/security/cve/CVE-2026-2229

https://access.redhat.com/security/cve/CVE-2026-2327

https://access.redhat.com/security/cve/CVE-2026-26996

https://access.redhat.com/security/cve/CVE-2026-27904

https://access.redhat.com/security/cve/CVE-2026-30827

https://access.redhat.com/security/cve/CVE-2026-31802

https://access.redhat.com/security/cve/CVE-2026-32141

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-32305

https://access.redhat.com/errata/RHSA-2026:18054

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index

https://access.redhat.com/articles/7134190

2337621

2441268

2442671

2442908

2442922

2458635

https://access.redhat.com/errata/RHSA-2026:18055

https://access.redhat.com/errata/RHSA-2026:18059

https://access.redhat.com/articles/7137769

JBEAP-29032

https://access.redhat.com/errata/RHSA-2026:11720

https://access.redhat.com/products/quarkus/

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.20.6.SP1

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20

Canonical URL

https://access.redhat.com/security/updates/classification#important

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.broker&version=7.13.5

https://docs.redhat.com/en/documentation/red_hat_amq_broker/7.13

2445449

2445451

https://access.redhat.com/errata/RHSA-2026:53644

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index

2467540

2477217

2477220

2477224

2477226

Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AI

Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify function. An attacker can supply a long sequence of * characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition.

CVE-2026-2327 is a Regular Expression Denial of Service (ReDoS) vulnerability found in the markdown-it package, a popular JavaScript Markdown parser widely used in web applications and content management systems. The vulnerability exists in versions 13.0.0 through 14.1.1 due to the use of the regular expression /\*+$/ within the linkify function. This regex is designed to match sequences of asterisks at the end of strings but is susceptible to catastrophic backtracking when processing input containing a long sequence of '*' characters followed by a non-matching character. An attacker can craft malicious markdown input that triggers this excessive backtracking, causing the regex engine to consume excessive CPU resources and potentially leading to denial of service by slowing down or crashing the application. The vulnerability requires no authentication or user interaction and can be exploited remotely by submitting specially crafted markdown content to applications using the vulnerable markdown-it versions. The CVSS 4.0 score of 6.9 reflects a medium severity, with network attack vector, low complexity, no privileges or user interaction needed, and limited impact primarily on availability. No known exploits have been reported in the wild, but the vulnerability poses a risk to any service processing untrusted markdown input with affected markdown-it versions. The issue can be mitigated by upgrading markdown-it to a version later than 14.1.1 where the regex has been fixed or replaced, or by applying input validation and limiting input length to reduce the risk of triggering the ReDoS condition.

Detailed information about CVE-2026-2327: Regular Expression Denial of Service (ReDoS) in markdown-it affecting null markdown-it. Get real-time updates, technic

CVE-2026-2327: Regular Expression Denial of Service (ReDoS) in markdown-it - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-2327: Regular Expression Denial of Service (ReDoS) in markdown-it


Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AICVE-2025-14813 0 Release of RHOAI 2.25.7 provides these changes: HighVulnerability#gcve #csaf #cve-2025-14813 Join the discussion	GCVE Database	06/10/2026, 04:27:13 UTC Added: 05/26/2026, 20:58:00 UTC
CVE-2026-2327: Regular Expression Denial of Service (ReDoS) in markdown-itCVE-2026-2327 0 Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\+$/ in the linkify function. An attacker can supply a long sequence of characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition. MediumVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2026-2327 Join the discussion	CVE Database V5	02/12/2026, 05:00:07 UTC Added: 02/12/2026, 05:46:15 UTC

Threats Tagged 'cve-2026-2327'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-2327'

Lead Pen Test Professional