Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libvips

A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The identifier of the patch is d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. To fix this issue, it is recommended to deploy a patch.

CVE-2026-3146 is a vulnerability identified in the libvips image processing library, specifically in the function vips_foreign_load_matrix_header located in the source file libvips/foreign/matrixload.c. The flaw arises from improper handling of pointers, leading to a null pointer dereference when processing certain matrix headers. This results in an application crash, effectively causing a denial of service (DoS). The vulnerability requires local access with low privileges to exploit, meaning an attacker must have the ability to execute code or commands on the affected system. No user interaction or elevated privileges beyond local access are necessary. The vulnerability affects all libvips versions from 8.0 through 8.18.0 inclusive. The patch addressing this issue is identified by the commit hash d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. The CVSS v4.0 base score is 4.8, reflecting a medium severity level due to the limited attack vector (local), low complexity, and impact confined to availability. There are no known exploits reported in the wild at this time. Libvips is widely used in image processing pipelines, including web services, media platforms, and cloud environments, making this vulnerability relevant to organizations relying on these technologies. The vulnerability does not impact confidentiality or integrity but can disrupt services by crashing applications that process maliciously crafted matrix headers.

Detailed information about CVE-2026-3146: NULL Pointer Dereference in libvips affecting null libvips. Get real-time updates, technical details, and mitigation s

CVE-2026-3146: NULL Pointer Dereference in libvips - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3146: NULL Pointer Dereference in libvips

Threats Tagged 'cve-2026-3146'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-3146'

Lead Pen Test Professional