Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This security update for docker-stable addresses two vulnerabilities in the BuildKit component. The first (CVE-2026-33747) involves malicious frontends crafting API messages that cause files to be written outside the BuildKit state directory. The second (CVE-2026-33748) concerns insufficient validation of Git URL fragment subdirectory components, potentially allowing access to files outside the checked-out Git repository. Both issues have been fixed in this update.

The update for docker-stable fixes two security issues in the BuildKit component. CVE-2026-33747 allows malicious frontends to craft API messages that result in file writes outside the BuildKit state directory, potentially leading to unauthorized file modifications. CVE-2026-33748 involves insufficient validation of Git URL fragment subdirectory components, which may allow attackers to access files outside the intended Git repository checkout. These vulnerabilities were identified and addressed by the SUSE Product Security Team in the docker-stable-24.0.9_ce-160000.5.1.aarch64 and docker-stable-buildx-0.25.0-160000.5.1.aarch64 packages.

Detailed information about Security update for docker-stable affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation

Security update for docker-stable - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

URL for SUSE-SU-2026:2578-1

E-Mail link for SUSE-SU-2026:2578-1

SUSE Bug 1260967

SUSE Bug 1261078

SUSE Bug 1265907

SUSE Bug 1265929

SUSE CVE CVE-2026-33747 page

SUSE CVE CVE-2026-33748 page

SUSE CVE CVE-2026-33997 page

SUSE CVE CVE-2026-34040 page

Security update for docker-stable

Releases of Red Hat OpenShift Builds 1.6.5

gRPC-Go versions before 1.79.3 improperly validate the HTTP/2 :path pseudo-header by accepting paths without the mandatory leading slash (e.g., 'Service/Method' instead of '/Service/Method'). While the server routes these requests correctly, authorization interceptors evaluate the raw, non-canonical path, causing deny rules defined with canonical paths to fail to match. This leads to an authorization bypass if fallback allow rules exist. The vulnerability affects grpc-go servers that use path-based authorization interceptors such as the official RBAC implementation in google.golang.org/grpc/authz or custom interceptors relying on info.FullMethod or grpc.Method(ctx). A remote attacker can exploit this by sending malformed HTTP/2 frames with a :path missing the leading slash, potentially gaining unauthorized access or causing information disclosure. Red Hat has acknowledged this issue affecting OpenShift Container Platform and advises upgrading to fixed package versions. Mitigation can also be achieved by normalizing the :path header at the proxy or API gateway level before requests reach the grpc-go server.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5 affecting Red Hat Product Security Red Hat. Get real-time updates, technica

Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:21692

https://access.redhat.com/security/cve/CVE-2026-33186

https://access.redhat.com/security/cve/CVE-2026-35469

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:11330

https://access.redhat.com/security/cve/CVE-2026-33211

https://access.redhat.com/security/cve/CVE-2026-33810

https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6

Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5


Security update for docker-stableCVE-2026-33747 0 This security update for docker-stable addresses two vulnerabilities in the BuildKit component. The first (CVE-2026-33747) involves malicious frontends crafting API messages that cause files to be written outside the BuildKit state directory. The second (CVE-2026-33748) concerns insufficient validation of Git URL fragment subdirectory components, potentially allowing access to files outside the checked-out Git repository. Both issues have been fixed in this update. HighVulnerability#gcve #csaf #cve-2026-33747 Join the discussion	GCVE Database	05/26/2026, 12:21:52 UTC Added: 06/24/2026, 17:00:24 UTC
Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5CVE-2026-33186 0 Releases of Red Hat OpenShift Builds 1.6.5 HighVulnerability#gcve #csaf #cve-2026-33186 Join the discussion	GCVE Database	04/28/2026, 07:16:04 UTC Added: 05/26/2026, 20:57:58 UTC

Threats Tagged 'cve-2026-33997'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-33997'

Lead Pen Test Professional