Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.

The Red Hat Developer Hub (RHDH) 1.10.3 Plugin Catalog release includes plugins that are extensible but contain multiple security issues, notably CVE-2026-13149. This CVE describes a vulnerability in the widely used npm package brace-expansion, where the expand() function can be exploited by an attacker supplying crafted input with consecutive non-expanding brace groups. This triggers exponential-time complexity, causing significant CPU resource consumption and event-loop blocking, resulting in denial of service. The vulnerability is typically introduced transitively via minimatch or glob dependencies. No practical mitigation exists other than upgrading to a fixed version of brace-expansion when available. The Red Hat advisory does not currently provide a fix for this vulnerability or the other listed CVEs in this release.

Detailed information about Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. affecting Red Hat Product Security Red Hat

Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:48126

https://access.redhat.com/security/cve/CVE-2026-13149

https://access.redhat.com/security/cve/CVE-2026-13676

https://access.redhat.com/security/cve/CVE-2026-45740

https://access.redhat.com/security/cve/CVE-2026-46625

https://access.redhat.com/security/cve/CVE-2026-48068

https://access.redhat.com/security/cve/CVE-2026-48069

https://access.redhat.com/security/cve/CVE-2026-48801

https://access.redhat.com/security/cve/CVE-2026-49978

https://access.redhat.com/security/cve/CVE-2026-5038

https://access.redhat.com/security/cve/CVE-2026-5079

https://access.redhat.com/security/cve/CVE-2026-59869

https://access.redhat.com/security/cve/CVE-2026-59877

https://access.redhat.com/security/updates/classification/

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://redhat.atlassian.net/browse/RHIDP-15065

https://redhat.atlassian.net/browse/RHIDP-15162

https://redhat.atlassian.net/browse/RHIDP-15197

https://access.redhat.com/errata/RHSA-2026:49642

https://access.redhat.com/security/cve/CVE-2026-42504

https://access.redhat.com/security/cve/CVE-2026-59892

https://redhat.atlassian.net/browse/RHDHBUGS-3455

https://access.redhat.com/errata/RHSA-2026:52768

https://access.redhat.com/security/cve/CVE-2026-48712

Canonical URL

Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 release.

protobuf.js

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversion and the custom google.protobuf.Any JSON conversion path. A crafted protobuf binary payload containing deeply nested Any values could cause the JavaScript call stack to be exhausted during conversion to JSON. This vulnerability is fixed in 7.6.1 and 8.4.1.

CVE-2026-48712 is an uncontrolled recursion vulnerability (CWE-674) in protobuf.js affecting versions prior to 7.6.1 and from 8.0.0 up to but not including 8.4.1. The vulnerability occurs in the toObject() conversion and the custom google.protobuf.Any JSON conversion, where deeply nested Any values in protobuf binaries can cause the JavaScript call stack to be exhausted. This results in a denial of service due to application crash or unresponsiveness. The vulnerability has a CVSS 3.1 score of 7.5 (high severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts availability only. The issue is fixed in protobuf.js versions 7.6.1 and 8.4.1.

Detailed information about CVE-2026-48712: CWE-674: Uncontrolled Recursion in protobufjs protobuf.js affecting protobufjs protobuf.js. Get real-time updates, te

CVE-2026-48712: CWE-674: Uncontrolled Recursion in protobufjs protobuf.js - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-48712: CWE-674: Uncontrolled Recursion in protobufjs protobuf.js


Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 release.CVE-2026-5038 0 Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins. HighVulnerability#gcve #csaf #cve-2026-5038 Join the discussion	GCVE Database	08/03/2026, 10:03:58 UTC Added: 07/30/2026, 05:46:42 UTC
CVE-2026-48712: CWE-674: Uncontrolled Recursion in protobufjs protobuf.jsCVE-2026-48712 0 protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversion and the custom google.protobuf.Any JSON conversion path. A crafted protobuf binary payload containing deeply nested Any values could cause the JavaScript call stack to be exhausted during conversion to JSON. This vulnerability is fixed in 7.6.1 and 8.4.1. HighVulnerability#cve #cve-2026-48712 #cwe-674 Join the discussion	CVE Database V5	06/22/2026, 16:21:21 UTC Added: 06/22/2026, 17:39:38 UTC

Threats Tagged 'cve-2026-48712'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-48712'

Lead Pen Test Professional