Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

io.netty:netty-codec-redis

The RedisArrayAggregator component in io.netty:netty-codec-redis fails to clear retained partial aggregate state when the maxElements limit is exceeded during RESP array decoding. While exceeding maxNestedArrayDepth triggers cleanup, exceeding maxElements throws a CodecException without releasing retained ByteBuf references or clearing parser state. This leads to stale aggregate state persisting in the handler if the channel remains open after the exception. The vulnerability allows an unauthenticated peer to keep large pooled buffers pinned, potentially causing resource exhaustion until the channel is closed or the stale aggregate completes. The issue is confirmed in versions 4.1.135.Final, 4.2.15.Final, and the current 4.2 branch head. The suggested fix is to call releaseAndClearDepths() before throwing in the maxElements failure branch, aligning it with the existing nested-depth cleanup behavior.

Detailed information about Io.netty:netty codec redis: Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state (CVE-2026-56818)

Io.netty:netty codec redis: Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state (CVE-2026-56818) - Live Threat Intelligence - Threat Radar | OffSeq.com

Netty: [Unknown description] (CVE-2026-56818)

thingsboard

Multiple security issues were addressed in the netty-4.1.136-1.1 package included in the GA media of openSUSE Tumbleweed. These vulnerabilities affect the SUSE product and have been fixed in this package version. The severity is assessed as medium. No CVSS score is provided. No known exploits in the wild have been reported.

The netty-4.1.136-1.1 package on the GA media of openSUSE Tumbleweed contains multiple security fixes addressing various vulnerabilities identified under CVE-2026-44891 and related CVEs. These issues impact the SUSE product and have been resolved in this specific package version. The vulnerabilities are collectively rated medium severity. No detailed CVSS vector or score is available, and no active exploitation has been reported.

Detailed information about Security fixes in thingsboard 4.3.1.3-r1 (CVE-2026-44891) affecting null thingsboard. Get real-time updates, technical details, and m

Security fixes in thingsboard 4.3.1.3-r1 (CVE-2026-44891) - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2026-44891 page

SUSE CVE CVE-2026-55831 page

SUSE CVE CVE-2026-55833 page

SUSE CVE CVE-2026-55851 page

SUSE CVE CVE-2026-56745 page

SUSE CVE CVE-2026-56746 page

SUSE CVE CVE-2026-56817 page

SUSE CVE CVE-2026-56818 page

SUSE CVE CVE-2026-56819 page

SUSE CVE CVE-2026-56820 page

SUSE CVE CVE-2026-56821 page

SUSE CVE CVE-2026-56822 page

SUSE CVE CVE-2026-59898 page

SUSE CVE CVE-2026-59899 page

SUSE CVE CVE-2026-59900 page

SUSE CVE CVE-2026-59901 page

SUSE CVE CVE-2026-59919 page

SUSE CVE CVE-2026-59920 page

netty-4.1.136-1.1 on GA media

These are all security issues fixed in the netty-4.1.136-1.1 package on the GA media of openSUSE Tumbleweed.

The Thingsboard package version 4.2.2.3-r1 fixes a total of 84 vulnerabilities, including CVE-2026-44891. The vulnerabilities are catalogued under various GHSA identifiers, but no detailed technical descriptions or CVSS scores are provided. The patch is available and this version is the fixed release. The affected ecosystem includes Alpine. There is no evidence of active exploitation in the wild. The vendor has released this version to remediate these security issues.

Detailed information about Security fixes in thingsboard 4.2.2.3-r1 (CVE-2026-44891) affecting null thingsboard. Get real-time updates, technical details, and m

Security fixes in thingsboard 4.2.2.3-r1 (CVE-2026-44891) - Live Threat Intelligence - Threat Radar | OffSeq.com


Netty: [Unknown description] (CVE-2026-56818)CVE-2026-56818 0 [Unknown description] MediumVulnerability#gcve #osv #ghsa-p9jm-q85p-7mcp Join the discussion	GCVE Database	08/04/2026, 00:00:00 UTC Added: 08/08/2026, 14:54:34 UTC
netty-4.1.136-1.1 on GA mediaCVE-2026-44891 0 Multiple security issues were addressed in the netty-4.1.136-1.1 package included in the GA media of openSUSE Tumbleweed. These vulnerabilities affect the SUSE product and have been fixed in this package version. The severity is assessed as medium. No CVSS score is provided. No known exploits in the wild have been reported. MediumVulnerability#gcve #osv #cleanstart-2026-gy63167 Join the discussion	GCVE Database	07/28/2026, 00:00:00 UTC Added: 08/14/2026, 16:36:47 UTC
netty-4.1.136-1.1 on GA mediaCVE-2026-44891 0 These are all security issues fixed in the netty-4.1.136-1.1 package on the GA media of openSUSE Tumbleweed. MediumVulnerability#gcve #osv #cleanstart-2026-se70344 Join the discussion	GCVE Database	07/28/2026, 00:00:00 UTC Added: 08/14/2026, 16:36:44 UTC

Threats Tagged 'cve-2026-56818'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-56818'

Lead Pen Test Professional