Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' control to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.



 Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

This vulnerability (CVE-2026-42934) involves an out-of-bounds read (CWE-125) in the ngx_http_charset_module of NGINX Plus and NGINX Open Source. Under certain configurations involving charset, source_charset, charset_map, and proxy_pass with buffering disabled, unauthenticated attackers can send crafted requests that trigger a heap buffer over-read in the NGINX worker process. This can result in limited disclosure of memory contents or cause the worker process to restart. The issue affects versions R32 and R36 of NGINX Plus. The vulnerability has a CVSS 3.1 base score of 4.8, indicating medium severity. No known exploits are reported in the wild, and no official patch or remediation level has been announced.

Detailed information about CVE-2026-42934: CWE-125 Out-of-bounds Read in F5 NGINX Plus affecting F5 NGINX Plus. Get real-time updates, technical details, and mi

CVE-2026-42934: CWE-125 Out-of-bounds Read in F5 NGINX Plus - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-42934: CWE-125 Out-of-bounds Read in F5 NGINX Plus

A vulnerability in the NGINX ngx_quic_module affects versions 1.26.0 up to but not including 1.30.1 when configured to use the HTTP/3 QUIC module. This flaw allows an attacker to spoof their source IP address, potentially bypassing authorization or rate limiting controls. The vulnerability is classified with medium severity. A patch is available to address this issue.

The NGINX ngx_quic_module vulnerability (CVE-2026-40460) occurs when NGINX Plus or NGINX Open Source is configured with the HTTP/3 QUIC module. An attacker can exploit this vulnerability to spoof their source IP address, which may allow bypassing authorization mechanisms or rate limiting. The affected versions are from 1.26.0 up to but excluding 1.30.1. The vulnerability is related to improper handling of source IP validation in the QUIC module. There is no CVSS score provided, but the severity is assessed as medium. A patch is available to remediate this issue.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

WID-SEC-W-2026-1527 - CSAF Version

WID-SEC-2026-1527 - Portal Version

GitHub Security Advisory GHSA-GCGV-V5GF-C543 vom 2026-05-13

GitHub Security Advisory GHSA-H7RQ-F9GQ-MC8R vom 2026-05-13

GitHub Security Advisory GHSA-X88Q-X2R7-VG3G vom 2026-05-13

GitHub Security Advisory GHSA-V43F-895R-CHHH vom 2026-05-13

GitHub Security Advisory GHSA-6VMC-2WH4-77QP vom 2026-05-13

GitHub Security Advisory GHSA-FM65-XRRR-C358 vom 2026-05-13

PoC CVE-2026-42945 vom 2026-05-13

F5 Security Advisory K000161019 vom 2026-05-13

F5 Security Advisory K000161021 vom 2026-05-13

F5 Security Advisory K000161068 vom 2026-05-13

F5 Security Advisory K000161131 vom 2026-05-13

F5 Security Advisory K000161027 vom 2026-05-13

F5 Security Advisory K000161028 vom 2026-05-13

Fedora Security Advisory FEDORA-2026-094EB13BB1 vom 2026-05-14

Ubuntu Security Notice USN-8271-1 vom 2026-05-14

Fedora Security Advisory FEDORA-2026-FB53CB4D67 vom 2026-05-14

Fedora Security Advisory FEDORA-2026-38623B4FED vom 2026-05-14

Red Hat Security Advisory RHSA-2026:17751 vom 2026-05-15

NGINX ngx_quic_module vulnerability (CVE-2026-40460)


CVE-2026-42934: CWE-125 Out-of-bounds Read in F5 NGINX PlusCVE-2026-42934 0 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' control to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. MediumVulnerability#cve #cve-2026-42934 #cwe-125 Join the discussion	CVE Database V5	05/15/2026, 08:50:06 UTC Added: 05/13/2026, 15:21:59 UTC
NGINX ngx_quic_module vulnerability (CVE-2026-40460)CVE-2026-40460 0 A vulnerability in the NGINX ngx_quic_module affects versions 1.26.0 up to but not including 1.30.1 when configured to use the HTTP/3 QUIC module. This flaw allows an attacker to spoof their source IP address, potentially bypassing authorization or rate limiting controls. The vulnerability is classified with medium severity. A patch is available to address this issue. MediumVulnerability#gcve #csaf #cve-2026-40460 Join the discussion	GCVE Database	05/15/2026, 08:50:00 UTC Added: 05/26/2026, 20:58:57 UTC

Threats Tagged 'cve-2026-42934'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-42934'

Lead Pen Test Professional