Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 2.25.7 provides these changes:

CVE-2025-14813 is a cryptographic vulnerability in the BC-JAVA bcprov library's GOSTCTR implementation used by Red Hat products including OpenShift Dev Spaces. The GOSTCTR cipher reuses keystream after encrypting more than 255 blocks, violating fundamental confidentiality guarantees. An attacker who captures ciphertext encrypted beyond this limit can perform cryptanalysis to recover plaintext data. The vulnerability impacts confidentiality but not integrity or availability. Red Hat's advisory highlights the need to limit encryption payload size or transition to a secure authenticated encryption mode. No explicit patch or fix is currently provided; mitigation is procedural.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. affecting Red Hat Product Security Red Hat. 

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:24977

https://access.redhat.com/security/cve/CVE-2025-14813

https://access.redhat.com/security/cve/CVE-2025-48956

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2026-1462

https://access.redhat.com/security/cve/CVE-2026-23490

https://access.redhat.com/security/cve/CVE-2026-24747

https://access.redhat.com/security/cve/CVE-2026-25048

https://access.redhat.com/security/cve/CVE-2026-25960

https://access.redhat.com/security/cve/CVE-2026-27489

https://access.redhat.com/security/cve/CVE-2026-27893

https://access.redhat.com/security/cve/CVE-2026-28500

https://access.redhat.com/security/cve/CVE-2026-28684

https://access.redhat.com/security/cve/CVE-2026-29063

https://access.redhat.com/security/cve/CVE-2026-29074

https://access.redhat.com/security/cve/CVE-2026-31958

https://access.redhat.com/security/cve/CVE-2026-32280

https://access.redhat.com/errata/RHSA-2026:17668

https://access.redhat.com/security/updates/classification/#critical

2444320

2449290

2451409

2452453

2452456

2455916

2456519

2458187

2458634

2458638

2458640

2458641

2460003

2463172

2463173

2463177

2463178

2463179

https://access.redhat.com/errata/RHSA-2026:21772

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2026-0636

https://access.redhat.com/security/cve/CVE-2026-1525

https://access.redhat.com/security/cve/CVE-2026-1526

https://access.redhat.com/security/cve/CVE-2026-1528

https://access.redhat.com/security/cve/CVE-2026-1605

https://access.redhat.com/security/cve/CVE-2026-2229

https://access.redhat.com/security/cve/CVE-2026-2327

https://access.redhat.com/security/cve/CVE-2026-26996

https://access.redhat.com/security/cve/CVE-2026-27904

https://access.redhat.com/security/cve/CVE-2026-30827

https://access.redhat.com/security/cve/CVE-2026-31802

https://access.redhat.com/security/cve/CVE-2026-32141

https://access.redhat.com/security/cve/CVE-2026-32282

https://access.redhat.com/security/cve/CVE-2026-32305

https://access.redhat.com/errata/RHSA-2026:18054

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index

https://access.redhat.com/articles/7134190

2337621

2441268

2442671

2442908

2442922

2458635

https://access.redhat.com/errata/RHSA-2026:18055

https://access.redhat.com/errata/RHSA-2026:18059

https://access.redhat.com/articles/7137769

JBEAP-29032

https://access.redhat.com/errata/RHSA-2026:11720

https://access.redhat.com/products/quarkus/

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.20.6.SP1

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20

Canonical URL

https://access.redhat.com/security/updates/classification#important

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.broker&version=7.13.5

https://docs.redhat.com/en/documentation/red_hat_amq_broker/7.13

2445449

2445451

https://access.redhat.com/errata/RHSA-2026:53644

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index

2467540

2477217

2477220

2477224

2477226

Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AI

spring-boot

An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the attacker determining the secret and uploading changed classes, thereby achieving remote code execution in the remote application.

Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14), 3.4.0–3.4.15 (fix 3.4.16), 3.3.0–3.3.18 (fix 3.3.19), 2.7.0–2.7.32 (fix 2.7.33); DevTools remote secret comparison. Versions that are no longer supported are also affected per vendor advisory.

This vulnerability (CVE-2026-40972) involves an observable timing discrepancy in the comparison of the DevTools remote secret in Spring Boot versions 2.7.0 through 4.0.5. An attacker positioned on the same network as the target application can leverage timing differences to deduce the secret used for remote DevTools connections. If the secret is fully determined, the attacker could upload altered classes to the application, potentially leading to remote code execution. The issue affects multiple supported and unsupported Spring Boot versions. Fixed versions include 2.7.33, 3.3.19, 3.4.16, 3.5.14, and 4.0.6. The CVSS v3.1 score is 7.5, indicating high severity, with attack vector being adjacent network and requiring high attack complexity.

Detailed information about CVE-2026-40972: CWE-208: Observable Timing Discrepancy in Spring Spring Boot affecting Spring Spring Boot. Get real-time updates, tec

CVE-2026-40972: CWE-208: Observable Timing Discrepancy in Spring Spring Boot - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-40972: CWE-208: Observable Timing Discrepancy in Spring Spring Boot


Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AICVE-2025-14813 0 Release of RHOAI 2.25.7 provides these changes: HighVulnerability#gcve #csaf #cve-2025-14813 Join the discussion	GCVE Database	06/10/2026, 04:27:13 UTC Added: 05/26/2026, 20:58:00 UTC
CVE-2026-40972: CWE-208: Observable Timing Discrepancy in Spring Spring BootCVE-2026-40972 0 An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the attacker determining the secret and uploading changed classes, thereby achieving remote code execution in the remote application. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14), 3.4.0–3.4.15 (fix 3.4.16), 3.3.0–3.3.18 (fix 3.3.19), 2.7.0–2.7.32 (fix 2.7.33); DevTools remote secret comparison. Versions that are no longer supported are also affected per vendor advisory. HighVulnerability#cve #cve-2026-40972 #cwe-208 Join the discussion	CVE Database V5	04/27/2026, 23:15:19 UTC Added: 04/27/2026, 23:24:01 UTC

Threats Tagged 'cve-2026-40972'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-40972'

Lead Pen Test Professional