Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub
user experience that simplifies the automation experience for Ansible users of all skill levels.
The Ansible plug-ins provide curated content and features to accelerate Ansible learner
onboarding and streamline Ansible use case adoption across your organization.

The Red Hat Developer Hub (RHDH) 1.10.3 Plugin Catalog release includes plugins that are extensible but contain multiple security issues, notably CVE-2026-13149. This CVE describes a vulnerability in the widely used npm package brace-expansion, where the expand() function can be exploited by an attacker supplying crafted input with consecutive non-expanding brace groups. This triggers exponential-time complexity, causing significant CPU resource consumption and event-loop blocking, resulting in denial of service. The vulnerability is typically introduced transitively via minimatch or glob dependencies. No practical mitigation exists other than upgrading to a fixed version of brace-expansion when available. The Red Hat advisory does not currently provide a fix for this vulnerability or the other listed CVEs in this release.

Detailed information about Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. affecting Red Hat Product Security Red Hat

Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:48126

https://access.redhat.com/security/cve/CVE-2026-13149

https://access.redhat.com/security/cve/CVE-2026-13676

https://access.redhat.com/security/cve/CVE-2026-45740

https://access.redhat.com/security/cve/CVE-2026-46625

https://access.redhat.com/security/cve/CVE-2026-48068

https://access.redhat.com/security/cve/CVE-2026-48069

https://access.redhat.com/security/cve/CVE-2026-48801

https://access.redhat.com/security/cve/CVE-2026-49978

https://access.redhat.com/security/cve/CVE-2026-5038

https://access.redhat.com/security/cve/CVE-2026-5079

https://access.redhat.com/security/cve/CVE-2026-59869

https://access.redhat.com/security/cve/CVE-2026-59877

https://access.redhat.com/security/updates/classification/

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://redhat.atlassian.net/browse/RHIDP-15065

https://redhat.atlassian.net/browse/RHIDP-15162

https://redhat.atlassian.net/browse/RHIDP-15197

https://access.redhat.com/errata/RHSA-2026:49642

https://access.redhat.com/security/cve/CVE-2026-42504

https://access.redhat.com/security/cve/CVE-2026-59892

https://redhat.atlassian.net/browse/RHDHBUGS-3455

https://access.redhat.com/errata/RHSA-2026:52768

https://access.redhat.com/security/cve/CVE-2026-48712

Canonical URL

https://access.redhat.com/errata/RHSA-2026:72712

https://access.redhat.com/security/cve/CVE-2026-19534

https://access.redhat.com/security/cve/CVE-2026-47683

https://access.redhat.com/security/cve/CVE-2026-55553

https://access.redhat.com/security/cve/CVE-2026-59879

https://access.redhat.com/security/cve/CVE-2026-82417

https://access.redhat.com/security/cve/CVE-2026-84375

https://access.redhat.com/security/cve/CVE-2026-87776

https://access.redhat.com/security/cve/CVE-2026-88932

https://access.redhat.com/security/cve/CVE-2026-89011

https://access.redhat.com/security/cve/CVE-2026-92000

https://access.redhat.com/security/cve/CVE-2026-92942

https://access.redhat.com/security/cve/CVE-2026-92958

https://access.redhat.com/security/cve/CVE-2026-92959

https://access.redhat.com/security/cve/CVE-2026-92961

https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform

Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

grpc-js

CVE-2026-48069 is a high-severity vulnerability in the grpc-node library (@grpc/grpc-js) where an invalid incoming compressed message can cause a client or server process to crash due to an uncaught exception. This affects multiple versions prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4. The issue is fixed in these specified versions.

@grpc/grpc-js, a JavaScript implementation of gRPC without a C++ addon, contains a vulnerability identified as CVE-2026-48069. Specifically, versions prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4 are susceptible to crashes caused by invalid incoming compressed messages that trigger uncaught exceptions. This denial-of-service condition affects both client and server processes using the affected versions. The vulnerability is categorized under CWE-248 (Uncaught Exception). The issue has been addressed in the listed fixed versions.

Detailed information about CVE-2026-48069: CWE-248: Uncaught Exception in grpc grpc-node affecting grpc grpc-node. Get real-time updates, technical details, and

CVE-2026-48069: CWE-248: Uncaught Exception in grpc grpc-node - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-48069: CWE-248: Uncaught Exception in grpc grpc-node


Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release UpdateCVE-2026-5038 0 Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub user experience that simplifies the automation experience for Ansible users of all skill levels. The Ansible plug-ins provide curated content and features to accelerate Ansible learner onboarding and streamline Ansible use case adoption across your organization. HighVulnerability#gcve #csaf #cve-2026-5038 Join the discussion	GCVE Database	09/28/2026, 16:29:02 UTC Added: 07/30/2026, 05:46:42 UTC
CVE-2026-48069: CWE-248: Uncaught Exception in grpc grpc-nodeCVE-2026-48069 0 CVE-2026-48069 is a high-severity vulnerability in the grpc-node library (@grpc/grpc-js) where an invalid incoming compressed message can cause a client or server process to crash due to an uncaught exception. This affects multiple versions prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4. The issue is fixed in these specified versions. HighVulnerability#cve #cve-2026-48069 #cwe-248 Join the discussion	CVE Database V5	07/14/2026, 19:42:32 UTC Added: 07/14/2026, 20:03:51 UTC

Threats Tagged 'cve-2026-48069'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-48069'

Lead Pen Test Professional