Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 3.3.3 provides these changes:

CVE-2025-6242 is a vulnerability in the node-forge library used by Red Hat OpenShift AI and other Red Hat products. It involves an interpretation conflict in ASN.1 structure parsing that allows unauthenticated attackers to bypass downstream cryptographic verification and security decisions by crafting malicious ASN.1 data. This leads to semantic divergence in schema validation. The vulnerability is rated important by Red Hat with a CVSS v3 base score of 8.7 (Red Hat rating). It affects cryptographic integrity and confidentiality but does not impact availability. Red Hat has not provided a patch or mitigation that meets their standards for deployment and stability. Updated Red Hat OpenShift AI images (3.3.3) are available, but no direct fix for this CVE is included. Red Hat continues to investigate and may provide fixes in future updates.

Detailed information about Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:19712

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-59057

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-62164

https://access.redhat.com/security/cve/CVE-2025-6242

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66448

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-69223

https://access.redhat.com/security/cve/CVE-2025-69873

https://access.redhat.com/security/cve/CVE-2026-0846

https://access.redhat.com/security/cve/CVE-2026-0847

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/errata/RHSA-2026:10184

https://access.redhat.com/security/cve/CVE-2025-11157

https://access.redhat.com/security/cve/CVE-2025-12103

https://access.redhat.com/security/cve/CVE-2025-14009

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-68131

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2025-69534

https://access.redhat.com/security/cve/CVE-2026-1002

https://access.redhat.com/security/cve/CVE-2026-22773

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI

Koa is middleware for Node.js using ES2017 async functions. Prior to versions 3.1.2 and 2.16.4, Koa's `ctx.hostname` API performs naive parsing of the HTTP Host header, extracting everything before the first colon without validating the input conforms to RFC 3986 hostname syntax. When a malformed Host header containing a `@` symbol is received, `ctx.hostname` returns `evil[.]com` - an attacker-controlled value. Applications using `ctx.hostname` for URL generation, password reset links, email verification URLs, or routing decisions are vulnerable to Host header injection attacks. Versions 3.1.2 and 2.16.4 fix the issue.

Koa middleware for Node.js versions before 2.16.4 and 3.1.2 have an improper input validation vulnerability (CWE-20) in the ctx.hostname API. The API naively parses the HTTP Host header by extracting everything before the first colon without ensuring the input conforms to RFC 3986 hostname syntax. When a malformed Host header containing an '@' symbol is processed, ctx.hostname returns an attacker-controlled value, enabling host header injection. This can affect applications that use ctx.hostname for URL generation, password reset links, email verification URLs, or routing decisions. The vulnerability is addressed in Koa versions 2.16.4 and 3.1.2.

Detailed information about CVE-2026-27959: CWE-20: Improper Input Validation in koajs koa affecting koajs koa. Get real-time updates, technical details, and mit

CVE-2026-27959: CWE-20: Improper Input Validation in koajs koa - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-27959: CWE-20: Improper Input Validation in koajs koa


Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AICVE-2025-6242 0 Release of RHOAI 3.3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2025-6242 Join the discussion	GCVE Database	05/20/2026, 15:49:06 UTC Added: 05/26/2026, 20:57:56 UTC
CVE-2026-27959: CWE-20: Improper Input Validation in koajs koaCVE-2026-27959 0 Koa is middleware for Node.js using ES2017 async functions. Prior to versions 3.1.2 and 2.16.4, Koa's `ctx.hostname` API performs naive parsing of the HTTP Host header, extracting everything before the first colon without validating the input conforms to RFC 3986 hostname syntax. When a malformed Host header containing a `@` symbol is received, `ctx.hostname` returns `evil[.]com` - an attacker-controlled value. Applications using `ctx.hostname` for URL generation, password reset links, email verification URLs, or routing decisions are vulnerable to Host header injection attacks. Versions 3.1.2 and 2.16.4 fix the issue. HighVulnerability#cve #cve-2026-27959 #cwe-20 Join the discussion	CVE Database V5	02/26/2026, 01:45:45 UTC Added: 02/26/2026, 02:11:36 UTC

Threats Tagged 'cve-2026-27959'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-27959'

Lead Pen Test Professional