Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

The vulnerability exists in polkit's polkit-agent-helper-1 setuid binary, which processes input from standard input without size limitations. A local attacker can exploit this by supplying a specially crafted, excessively long input, causing unbounded memory allocation and triggering an out-of-memory (OOM) condition. This results in a denial of service (DoS) affecting system availability. The issue is classified under CWE-770 (Allocation of Resources Without Limits or Throttling).

Detailed information about Red Hat Security Advisory: polkit security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detail

Red Hat Security Advisory: polkit security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:59997

https://access.redhat.com/security/updates/classification/#moderate

2451739

Canonical URL

CVE-2026-4897 Polkit: polkit: denial of service via unbounded input processing through standard input - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

Polkit: polkit: denial of service via unbounded input processing through standard input

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

This vulnerability involves the allocation of resources without limits or throttling in the polkit-agent-helper-1 setuid binary on Red Hat Enterprise Linux 10. A local attacker can provide a specially crafted, excessively long input through standard input, which causes the process to consume excessive memory and potentially trigger an out-of-memory condition. This results in a denial of service affecting system availability. The CVSS vector indicates low attack complexity and low privileges required, with no impact on confidentiality or integrity but a high impact on availability.

Detailed information about CVE-2026-4897: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat 

CVE-2026-4897: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-4897: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10


Polkit: polkit: denial of service via unbounded input processing through standard inputCVE-2026-4897 0 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle MediumVulnerability#gcve #csaf #cve-2026-4897 Join the discussion	GCVE Database	04/02/2026, 01:05:31 UTC Added: 09/01/2026, 15:45:20 UTC
CVE-2026-4897: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10CVE-2026-4897 0 A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system. MediumVulnerability#cve #cve-2026-4897 #gcve Join the discussion	CVE Database V5	03/26/2026, 14:56:05 UTC Added: 03/26/2026, 18:27:09 UTC

Threats Tagged 'cve-2026-4897'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-4897'

Lead Pen Test Professional