Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This Red Hat Offline Knowledge Portal release upgrades from Solr 9.8.1 to Solr 10.0.0, and fixes several CVEs. It also includes content updates as of May 26 2026.

CVE-2025-11143 is a vulnerability in the org.eclipse.jetty URI parser where differential parsing of URIs compared to other parsers can lead to security bypasses, such as bypassing blacklist enforcement or revealing internal system details indirectly. This issue affects the Red Hat Offline Knowledge Portal, which has been updated from Solr 9.8.1 to 10.0.0 to mitigate this and other CVEs. The vulnerability requires an attacker to craft URIs that exploit Jetty's parsing differences while bypassing other components, making exploitation non-trivial. Red Hat rates this vulnerability as low severity and provides an updated container image as a fix.

Detailed information about Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update affecting Red Hat Product Security Red Hat. G

Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:21773

https://access.redhat.com/products/red-hat-offline-knowledge-portal

https://access.redhat.com/security/cve/CVE-2025-11143

https://access.redhat.com/security/cve/CVE-2026-2332

https://access.redhat.com/security/cve/CVE-2026-34477

https://access.redhat.com/security/cve/CVE-2026-34478

https://access.redhat.com/security/cve/CVE-2026-34479

https://access.redhat.com/security/cve/CVE-2026-34480

https://access.redhat.com/security/cve/CVE-2026-34481

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_offline_knowledge_portal/1

Canonical URL

Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update

log4j-core

org.apache.logging.log4j:log4j-core

CVE-2026-34477 is a vulnerability in Apache Log4j Core affecting versions from 2.12.0 through 2.25.3. It involves improper validation of TLS certificates when hostname verification is configured via the <Ssl> element's verifyHostName attribute, which was silently ignored in these versions. This flaw allows a network attacker to potentially perform man-in-the-middle attacks if certain conditions are met, such as using SMTP, Socket, or Syslog appenders with TLS configured and the attacker presenting a trusted certificate. The issue does not affect the HTTP appender, which verifies hostnames correctly. Users are advised to upgrade to version 2.25.

The vulnerability arises because the verifyHostName attribute in the <Ssl> element of Apache Log4j Core was introduced in version 2.12.0 but ignored up to version 2.25.3, leaving TLS connections vulnerable to interception despite configuration. This incomplete fix follows an earlier CVE-2025-68161 that addressed hostname verification only when enabled via the log4j2.sslVerifyHostName system property. The flaw affects SMTP, Socket, and Syslog appenders using TLS with nested <Ssl> configuration. An attacker capable of presenting a certificate trusted by the appender's trust store can exploit this to perform man-in-the-middle attacks. The HTTP appender is unaffected as it uses a separate, correctly functioning verifyHostname attribute. The vendor recommends upgrading to Log4j Core 2.25.4 to resolve the issue.

Detailed information about CVE-2026-34477: CWE-297 Improper Validation of Certificate with Host Mismatch in Apache Software Foundation Apache Log4j Core affecti

CVE-2026-34477: CWE-297 Improper Validation of Certificate with Host Mismatch in Apache Software Foundation Apache Log4j Core - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-34477: CWE-297 Improper Validation of Certificate with Host Mismatch in Apache Software Foundation Apache Log4j Core


Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content updateCVE-2025-11143 0 This Red Hat Offline Knowledge Portal release upgrades from Solr 9.8.1 to Solr 10.0.0, and fixes several CVEs. It also includes content updates as of May 26 2026. HighVulnerability#gcve #csaf #cve-2025-11143 Join the discussion	GCVE Database	05/28/2026, 22:46:23 UTC Added: 05/29/2026, 21:01:50 UTC
CVE-2026-34477: CWE-297 Improper Validation of Certificate with Host Mismatch in Apache Software Foundation Apache Log4j CoreCVE-2026-34477 0 CVE-2026-34477 is a vulnerability in Apache Log4j Core affecting versions from 2.12.0 through 2.25.3. It involves improper validation of TLS certificates when hostname verification is configured via the <Ssl> element's verifyHostName attribute, which was silently ignored in these versions. This flaw allows a network attacker to potentially perform man-in-the-middle attacks if certain conditions are met, such as using SMTP, Socket, or Syslog appenders with TLS configured and the attacker presenting a trusted certificate. The issue does not affect the HTTP appender, which verifies hostnames correctly. Users are advised to upgrade to version 2.25. MediumVulnerability#cve #cve-2026-34477 #cwe-297 Join the discussion	CVE Database V5	04/10/2026, 15:36:19 UTC Added: 04/10/2026, 16:05:50 UTC

Threats Tagged 'cve-2026-34477'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-34477'

Lead Pen Test Professional