Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 2.25.7 provides these changes:

CVE-2025-14813 is a cryptographic vulnerability in the BC-JAVA bcprov library's GOSTCTR implementation used by Red Hat products including OpenShift Dev Spaces. The GOSTCTR cipher reuses keystream after encrypting more than 255 blocks, violating fundamental confidentiality guarantees. An attacker who captures ciphertext encrypted beyond this limit can perform cryptanalysis to recover plaintext data. The vulnerability impacts confidentiality but not integrity or availability. Red Hat's advisory highlights the need to limit encryption payload size or transition to a secure authenticated encryption mode. No explicit patch or fix is currently provided; mitigation is procedural.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. affecting Red Hat Product Security Red Hat. 

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:24977

https://access.redhat.com/security/cve/CVE-2025-14813

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2026-1462

https://access.redhat.com/security/cve/CVE-2026-23490

https://access.redhat.com/security/cve/CVE-2026-24747

https://access.redhat.com/security/cve/CVE-2026-25048

https://access.redhat.com/security/cve/CVE-2026-25960

https://access.redhat.com/security/cve/CVE-2026-27489

https://access.redhat.com/security/cve/CVE-2026-27893

https://access.redhat.com/security/cve/CVE-2026-28500

https://access.redhat.com/security/cve/CVE-2026-28684

https://access.redhat.com/security/cve/CVE-2026-29063

https://access.redhat.com/security/cve/CVE-2026-29074

https://access.redhat.com/security/cve/CVE-2026-31958

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/errata/RHSA-2026:17668

https://access.redhat.com/security/updates/classification/#critical

2444320

2449290

2451409

2452453

2452456

2455916

2456519

2458187

2458634

2458638

2458640

2458641

2460003

2463172

2463173

2463177

2463178

2463179

https://access.redhat.com/errata/RHSA-2026:21772

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2026-0636

https://access.redhat.com/security/cve/CVE-2026-1525

https://access.redhat.com/security/cve/CVE-2026-1526

https://access.redhat.com/security/cve/CVE-2026-1528

https://access.redhat.com/security/cve/CVE-2026-1605

https://access.redhat.com/security/cve/CVE-2026-2229

https://access.redhat.com/security/cve/CVE-2026-2327

https://access.redhat.com/security/cve/CVE-2026-26996

https://access.redhat.com/security/cve/CVE-2026-27904

https://access.redhat.com/security/cve/CVE-2026-30827

https://access.redhat.com/security/cve/CVE-2026-31802

https://access.redhat.com/security/cve/CVE-2026-32141

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-32305

https://access.redhat.com/errata/RHSA-2026:18054

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index

https://access.redhat.com/articles/7134190

2337621

2441268

2442671

2442908

2442922

2458635

https://access.redhat.com/errata/RHSA-2026:18055

https://access.redhat.com/errata/RHSA-2026:18059

https://access.redhat.com/articles/7137769

JBEAP-29032

https://access.redhat.com/errata/RHSA-2026:11720

https://access.redhat.com/products/quarkus/

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.20.6.SP1

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20

Canonical URL

https://access.redhat.com/security/updates/classification#important

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.broker&version=7.13.5

https://docs.redhat.com/en/documentation/red_hat_amq_broker/7.13

2445449

2445451

https://access.redhat.com/errata/RHSA-2026:53644

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index

2467540

2477217

2477220

2477224

2477226

Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AI

node-tar

node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.

The vulnerability identified as CVE-2026-31802 in the isaacs node-tar package is a path traversal flaw classified under CWE-22. Node-tar is a widely used Node.js library for handling tar archives. Prior to version 7.5.11, node-tar improperly limits pathnames during extraction, specifically when processing symbolic links with drive-relative targets on Windows platforms. An attacker can craft a tar archive containing a symlink with a target path like C:../../../target.txt, which escapes the intended extraction directory. When such an archive is extracted using the vulnerable tar.x() method, files outside the current working directory can be overwritten, leading to arbitrary file overwrite. This vulnerability does not require authentication or user interaction and can be exploited locally or remotely if untrusted tar files are processed. The CVSS 4.0 score of 8.2 reflects high severity, with low attack complexity and no privileges required, but limited to local attack vector (AV:L). The flaw impacts confidentiality and integrity by allowing unauthorized modification of files, potentially enabling privilege escalation or code execution if critical system or application files are overwritten. The vulnerability is fixed in node-tar version 7.5.11 by properly sanitizing and restricting symlink targets to prevent directory traversal outside the extraction root.

Detailed information about CVE-2026-31802: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in isaacs node-tar affecting i

CVE-2026-31802: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in isaacs node-tar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-31802: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in isaacs node-tar


Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AICVE-2025-14813 0 Release of RHOAI 2.25.7 provides these changes: HighVulnerability#gcve #csaf #cve-2025-14813 Join the discussion	GCVE Database	06/10/2026, 04:27:13 UTC Added: 05/26/2026, 20:58:00 UTC
CVE-2026-31802: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in isaacs node-tarCVE-2026-31802 0 node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-31802 #cwe-22 Join the discussion	CVE Database V5	03/09/2026, 21:11:56 UTC Added: 03/09/2026, 21:19:17 UTC

Threats Tagged 'cve-2026-31802'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-31802'

Lead Pen Test Professional