Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Package harbor-registry-fips version 2.7.1-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729

The go-redis client library for Go versions prior to 9.5.5, 9.6.3, and 9.7.2 has an improper input validation issue (CWE-20) that can cause out-of-order responses when the CLIENT SETINFO command times out during connection establishment. This occurs if the client is configured to send its identity and experiences network connectivity problems or aggressive timeouts. For sticky connections, this results in persistent out-of-order responses for the connection's lifetime, and all pipelined commands receive incorrect responses. When using the default connection pool, at most one out-of-order response occurs before the connection is discarded. The vulnerability is addressed in versions 9.5.5, 9.6.3, and 9.7.2 (with 9.7.3 as the lowest available patched 9.7.x version). A recommended workaround is to disable client identity transmission by setting DisableIdentity to true during client construction.

Detailed information about go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment affecting Microsoft 

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

Security fixes in harbor-registry-fips 2.7.1-r0 (CVE-2025-29923)

CVE-2026-27876 is a critical vulnerability in Grafana Enterprise that allows remote arbitrary code execution via a chained attack involving SQL Expressions and a Grafana Enterprise plugin. This vulnerability affects instances with the sqlExpressions feature toggle enabled. Multiple version ranges are impacted, with fixes available starting from specific patch versions. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability.

This vulnerability (CVE-2026-27876) in Grafana Enterprise arises from a chained attack vector leveraging SQL Expressions and a plugin, enabling remote arbitrary code execution (RCE). The issue is contingent on the sqlExpressions feature toggle being enabled. Affected versions include 11.6.0 up to but not including 11.6.14, 12.0.0 up to but not including 12.1.10, 12.2.0 up to but not including 12.2.8, 12.3.0 up to but not including 12.3.6, and 12.4.0 up to but not including 12.4.2. Versions 11.6.14, 12.1.10, 12.2.8, 12.3.6, 12.4.2, and all 13.0.0 and above contain the fix. Version 12.0.0 is end-of-life and did not receive an update. The vulnerability is tracked under CWE-94 (Improper Control of Generation of Code).

Detailed information about CVE-2026-27876: Vulnerability in Grafana Grafana Enterprise affecting Grafana Grafana Enterprise. Get real-time updates, technical de

CVE-2026-27876: Vulnerability in Grafana Grafana Enterprise - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-27876: Vulnerability in Grafana Grafana Enterprise


Security fixes in harbor-registry-fips 2.7.1-r0 (CVE-2025-29923)CVE-2025-29923 0 Package harbor-registry-fips version 2.7.1-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729 LowVulnerability#gcve #csaf #cve-2025-29923 Join the discussion	GCVE Database	07/30/2026, 07:10:53 UTC Added: 06/03/2026, 21:10:38 UTC
CVE-2026-27876: Vulnerability in Grafana Grafana EnterpriseCVE-2026-27876 0 CVE-2026-27876 is a critical vulnerability in Grafana Enterprise that allows remote arbitrary code execution via a chained attack involving SQL Expressions and a Grafana Enterprise plugin. This vulnerability affects instances with the sqlExpressions feature toggle enabled. Multiple version ranges are impacted, with fixes available starting from specific patch versions. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. CriticalVulnerability#cve #cve-2026-27876 Join the discussion	CVE Database V5	03/27/2026, 14:24:36 UTC Added: 03/27/2026, 14:44:49 UTC

Threats Tagged 'cve-2026-27876'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-27876'

Lead Pen Test Professional