Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 2.25.7 provides these changes:

CVE-2025-14813 is a cryptographic vulnerability in the BC-JAVA bcprov library's GOSTCTR implementation used by Red Hat products including OpenShift Dev Spaces. The GOSTCTR cipher reuses keystream after encrypting more than 255 blocks, violating fundamental confidentiality guarantees. An attacker who captures ciphertext encrypted beyond this limit can perform cryptanalysis to recover plaintext data. The vulnerability impacts confidentiality but not integrity or availability. Red Hat's advisory highlights the need to limit encryption payload size or transition to a secure authenticated encryption mode. No explicit patch or fix is currently provided; mitigation is procedural.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. affecting Red Hat Product Security Red Hat. 

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:24977

https://access.redhat.com/security/cve/CVE-2025-14813

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2026-1462

https://access.redhat.com/security/cve/CVE-2026-23490

https://access.redhat.com/security/cve/CVE-2026-24747

https://access.redhat.com/security/cve/CVE-2026-25048

https://access.redhat.com/security/cve/CVE-2026-25960

https://access.redhat.com/security/cve/CVE-2026-27489

https://access.redhat.com/security/cve/CVE-2026-27893

https://access.redhat.com/security/cve/CVE-2026-28500

https://access.redhat.com/security/cve/CVE-2026-28684

https://access.redhat.com/security/cve/CVE-2026-29063

https://access.redhat.com/security/cve/CVE-2026-29074

https://access.redhat.com/security/cve/CVE-2026-31958

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/errata/RHSA-2026:17668

https://access.redhat.com/security/updates/classification/#critical

2444320

2449290

2451409

2452453

2452456

2455916

2456519

2458187

2458634

2458638

2458640

2458641

2460003

2463172

2463173

2463177

2463178

2463179

https://access.redhat.com/errata/RHSA-2026:21772

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2026-0636

https://access.redhat.com/security/cve/CVE-2026-1525

https://access.redhat.com/security/cve/CVE-2026-1526

https://access.redhat.com/security/cve/CVE-2026-1528

https://access.redhat.com/security/cve/CVE-2026-1605

https://access.redhat.com/security/cve/CVE-2026-2229

https://access.redhat.com/security/cve/CVE-2026-2327

https://access.redhat.com/security/cve/CVE-2026-26996

https://access.redhat.com/security/cve/CVE-2026-27904

https://access.redhat.com/security/cve/CVE-2026-30827

https://access.redhat.com/security/cve/CVE-2026-31802

https://access.redhat.com/security/cve/CVE-2026-32141

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-32305

https://access.redhat.com/errata/RHSA-2026:18054

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index

https://access.redhat.com/articles/7134190

2337621

2441268

2442671

2442908

2442922

2458635

https://access.redhat.com/errata/RHSA-2026:18055

https://access.redhat.com/errata/RHSA-2026:18059

https://access.redhat.com/articles/7137769

JBEAP-29032

https://access.redhat.com/errata/RHSA-2026:11720

https://access.redhat.com/products/quarkus/

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.20.6.SP1

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20

Canonical URL

https://access.redhat.com/security/updates/classification#important

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.broker&version=7.13.5

https://docs.redhat.com/en/documentation/red_hat_amq_broker/7.13

2445449

2445451

https://access.redhat.com/errata/RHSA-2026:53644

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index

2467540

2477217

2477220

2477224

2477226

Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AI

go-sdk

The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.1, the Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without requiring `Content-Type: application/json`. In deployments without Authorization, especially stateless or sessionless configurations, this allows an arbitrary website to send MCP requests to a local server and potentially trigger tool execution. Version 1.4.1 contains a patch for the issue.

CVE-2026-33252 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the modelcontextprotocol Go SDK (go-sdk) prior to version 1.4.1. The root cause lies in the SDK's Streamable HTTP transport component, which uses Go's standard encoding/json package but fails to validate the Origin header on incoming POST requests. Additionally, it does not enforce that requests have a Content-Type header set to application/json. This combination allows an attacker to craft a malicious website that, when visited by a user, can cause the browser to send unauthorized MCP POST requests to a local server running the vulnerable SDK. In configurations where no authorization mechanism is present—particularly stateless or sessionless deployments—these requests can trigger execution of tools or commands that the MCP server exposes. The vulnerability affects the integrity and availability of the system by enabling unauthorized actions but does not expose confidential data directly. The CVSS v3.1 score is 7.1 (high severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, and impact on integrity and availability. The issue was publicly disclosed on March 23, 2026, and fixed in version 1.4.1 of the go-sdk. No known exploits in the wild have been reported yet. The vulnerability is cataloged under CWE-352, which covers CSRF attacks. Mitigation involves upgrading to the patched version and implementing strict validation of Origin headers and Content-Type enforcement to prevent cross-site requests from unauthorized origins.

Detailed information about CVE-2026-33252: CWE-352: Cross-Site Request Forgery (CSRF) in modelcontextprotocol go-sdk affecting modelcontextprotocol go-sdk. Get 

CVE-2026-33252: CWE-352: Cross-Site Request Forgery (CSRF) in modelcontextprotocol go-sdk - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-33252: CWE-352: Cross-Site Request Forgery (CSRF) in modelcontextprotocol go-sdk


Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AICVE-2025-14813 0 Release of RHOAI 2.25.7 provides these changes: HighVulnerability#gcve #csaf #cve-2025-14813 Join the discussion	GCVE Database	06/10/2026, 04:27:13 UTC Added: 05/26/2026, 20:58:00 UTC
CVE-2026-33252: CWE-352: Cross-Site Request Forgery (CSRF) in modelcontextprotocol go-sdkCVE-2026-33252 0 The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.1, the Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without requiring `Content-Type: application/json`. In deployments without Authorization, especially stateless or sessionless configurations, this allows an arbitrary website to send MCP requests to a local server and potentially trigger tool execution. Version 1.4.1 contains a patch for the issue. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2026-33252 #cwe-352 Join the discussion	CVE Database V5	03/23/2026, 23:44:16 UTC Added: 03/24/2026, 00:00:52 UTC

Threats Tagged 'cve-2026-33252'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-33252'

Lead Pen Test Professional