Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

munge

Titouan Lazard discovered that MUNGE contained an exploitable buffer
overflow in munged (the MUNGE authentication daemon). A local attacker
could possibly use this issue to forge MUNGE credentials, leading to
arbitrary code execution.

CVE-2026-25506 describes a buffer overflow vulnerability (CWE-787) in the munged daemon of MUNGE authentication service versions 0.5 through 0.5.17. A local attacker can exploit this by sending a crafted message with an oversized address length field, causing an out-of-bounds write that corrupts internal state and leaks the MAC subkey used for credential verification. This key leakage enables forging of arbitrary credentials, allowing impersonation of any user, including root, to services relying on MUNGE. The issue is resolved in version 0.5.18. The CVSS v3.1 base score is 7.7 (High), reflecting local attack vector with high impact on confidentiality and integrity, and low impact on availability.

Detailed information about Red Hat Security Advisory: munge security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details

CWE-787: Out-of-bounds Write in dun munge (CVE-2026-25506) - Live Threat Intelligence - Threat Radar | OffSeq.com

munge vulnerability (CVE-2026-25506)

MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18.

CVE-2026-25506 is a buffer overflow vulnerability (CWE-787) in the munged daemon of MUNGE authentication service versions 0.5.0 through 0.5.17. The flaw arises from improper handling of message unpacking, where an attacker can send a crafted message with an oversized address length field, causing out-of-bounds write and corruption of internal state. This corruption enables extraction of the MAC subkey used for credential verification. With the leaked key, an attacker can forge MUNGE credentials to impersonate any user, including root, to services relying on MUNGE for authentication. The vulnerability has a CVSS 3.1 score of 7.7 (High severity), requiring local attacker privileges and high attack complexity. The issue is resolved in MUNGE version 0.5.18. Red Hat has issued multiple advisories and errata addressing this vulnerability for their supported distributions.

Detailed information about CVE-2026-25506: CWE-787: Out-of-bounds Write in dun munge affecting dun munge. Get real-time updates, technical details, and mitigati

CVE-2026-25506: CWE-787: Out-of-bounds Write in dun munge - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-25506: CWE-787: Out-of-bounds Write in dun munge


munge vulnerability (CVE-2026-25506)CVE-2026-25506 0 Titouan Lazard discovered that MUNGE contained an exploitable buffer overflow in munged (the MUNGE authentication daemon). A local attacker could possibly use this issue to forge MUNGE credentials, leading to arbitrary code execution. MediumVulnerability#gcve #csaf #cve-2026-25506 Join the discussion	GCVE Database	02/12/2026, 18:08:10 UTC Added: 06/25/2026, 21:46:44 UTC
CVE-2026-25506: CWE-787: Out-of-bounds Write in dun mungeCVE-2026-25506 0 MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18. HighVulnerability#cve #cve-2026-25506 #cwe-787 Join the discussion	CVE Database V5	02/10/2026, 18:55:57 UTC Added: 02/10/2026, 19:46:22 UTC

Threats Tagged 'cve-2026-25506'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-25506'

Lead Pen Test Professional