Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. 
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.

CVE-2026-5422 is a critical vulnerability impacting Red Hat Migration Toolkit for Applications (MTA) before version 2.18.2. The vulnerability encompasses a broad range of weaknesses (including CWE-22, CWE-79, CWE-502, CWE-606, among others), indicating potential issues such as path traversal, cross-site scripting, deserialization flaws, and improper authorization. The vendor has released a security advisory (RHSA-2026:43038) with a patch that fixes these issues. The advisory lists numerous bug fixes and improvements related to UI, analysis, and security. No active exploitation has been reported. The vulnerability affects the MTA product used for application modernization on hybrid cloud environments with Red Hat OpenShift.

Detailed information about Red Hat Security Advisory: Migration Toolkit for Applications affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: Migration Toolkit for Applications - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:43038

https://access.redhat.com/security/cve/CVE-2026-13676

https://access.redhat.com/security/cve/CVE-2026-25681

https://access.redhat.com/security/cve/CVE-2026-27136

https://access.redhat.com/security/cve/CVE-2026-28684

https://access.redhat.com/security/cve/CVE-2026-33079

https://access.redhat.com/security/cve/CVE-2026-33811

https://access.redhat.com/security/cve/CVE-2026-34993

https://access.redhat.com/security/cve/CVE-2026-35397

https://access.redhat.com/security/cve/CVE-2026-39820

https://access.redhat.com/security/cve/CVE-2026-39821

https://access.redhat.com/security/cve/CVE-2026-40110

https://access.redhat.com/security/cve/CVE-2026-40171

https://access.redhat.com/security/cve/CVE-2026-42266

https://access.redhat.com/security/cve/CVE-2026-42499

https://access.redhat.com/security/cve/CVE-2026-42504

https://access.redhat.com/security/cve/CVE-2026-42557

https://access.redhat.com/security/cve/CVE-2026-42561

https://access.redhat.com/security/cve/CVE-2026-44431

https://access.redhat.com/security/cve/CVE-2026-44432

Red Hat Security Advisory: Migration Toolkit for Applications

jupyterlab

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7.

JupyterLab, an extensible interactive computing environment, has a security vulnerability (CVE-2026-42266) affecting versions 4.0.0 through 4.5.6. The vulnerability arises because the allow-list of extensions that can be installed from the PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced. Consequently, JupyterLab does not restrict extension installation to packages listed on the default PyPI index, enabling potential installation of malicious third-party extensions via crafted POST requests. This discrepancy between the Extension Manager API and GUI policy is resolved in version 4.5.7.

Detailed information about BIT-jupyterlab-2026-42266: JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions i

BIT-jupyterlab-2026-42266: JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. - Live Threat Intelligence - Threat Radar | OffSeq.com

JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. (CVE-2026-42266)


Red Hat Security Advisory: Migration Toolkit for ApplicationsCVE-2026-5422 0 Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage applications for faster migration to OpenShift via the user interface. CriticalVulnerability#gcve #csaf #cve-2026-5422 Join the discussion	GCVE Database	07/21/2026, 22:10:10 UTC Added: 07/22/2026, 00:10:59 UTC
JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. (CVE-2026-42266)CVE-2026-42266 0 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7. HighVulnerability#gcve #osv #bit-jupyterlab-2026-42266 Join the discussion	GCVE Database	05/15/2026, 08:42:28 UTC Added: 07/06/2026, 23:04:23 UTC

Threats Tagged 'cve-2026-42266'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-42266'

Lead Pen Test Professional