Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub
user experience that simplifies the automation experience for Ansible users of all skill levels.
The Ansible plug-ins provide curated content and features to accelerate Ansible learner
onboarding and streamline Ansible use case adoption across your organization.

The Red Hat Developer Hub (RHDH) 1.10.3 Plugin Catalog release includes plugins that are extensible but contain multiple security issues, notably CVE-2026-13149. This CVE describes a vulnerability in the widely used npm package brace-expansion, where the expand() function can be exploited by an attacker supplying crafted input with consecutive non-expanding brace groups. This triggers exponential-time complexity, causing significant CPU resource consumption and event-loop blocking, resulting in denial of service. The vulnerability is typically introduced transitively via minimatch or glob dependencies. No practical mitigation exists other than upgrading to a fixed version of brace-expansion when available. The Red Hat advisory does not currently provide a fix for this vulnerability or the other listed CVEs in this release.

Detailed information about Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. affecting Red Hat Product Security Red Hat

Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:48126

https://access.redhat.com/security/cve/CVE-2026-13149

https://access.redhat.com/security/cve/CVE-2026-13676

https://access.redhat.com/security/cve/CVE-2026-45740

https://access.redhat.com/security/cve/CVE-2026-46625

https://access.redhat.com/security/cve/CVE-2026-48068

https://access.redhat.com/security/cve/CVE-2026-48069

https://access.redhat.com/security/cve/CVE-2026-48801

https://access.redhat.com/security/cve/CVE-2026-49978

https://access.redhat.com/security/cve/CVE-2026-5038

https://access.redhat.com/security/cve/CVE-2026-5079

https://access.redhat.com/security/cve/CVE-2026-59869

https://access.redhat.com/security/cve/CVE-2026-59877

https://access.redhat.com/security/updates/classification/

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://redhat.atlassian.net/browse/RHIDP-15065

https://redhat.atlassian.net/browse/RHIDP-15162

https://redhat.atlassian.net/browse/RHIDP-15197

https://access.redhat.com/errata/RHSA-2026:49642

https://access.redhat.com/security/cve/CVE-2026-42504

https://access.redhat.com/security/cve/CVE-2026-59892

https://redhat.atlassian.net/browse/RHDHBUGS-3455

https://access.redhat.com/errata/RHSA-2026:52768

https://access.redhat.com/security/cve/CVE-2026-48712

Canonical URL

https://access.redhat.com/errata/RHSA-2026:72712

https://access.redhat.com/security/cve/CVE-2026-19534

https://access.redhat.com/security/cve/CVE-2026-47683

https://access.redhat.com/security/cve/CVE-2026-55553

https://access.redhat.com/security/cve/CVE-2026-59879

https://access.redhat.com/security/cve/CVE-2026-82417

https://access.redhat.com/security/cve/CVE-2026-84375

https://access.redhat.com/security/cve/CVE-2026-87776

https://access.redhat.com/security/cve/CVE-2026-88932

https://access.redhat.com/security/cve/CVE-2026-89011

https://access.redhat.com/security/cve/CVE-2026-92000

https://access.redhat.com/security/cve/CVE-2026-92942

https://access.redhat.com/security/cve/CVE-2026-92958

https://access.redhat.com/security/cve/CVE-2026-92959

https://access.redhat.com/security/cve/CVE-2026-92961

https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform

Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

propagator-jaeger

OpenTelemetry JavaScript versions prior to 2.9.0 contain a vulnerability in the @opentelemetry/propagator-jaeger module where malformed percent-encoded HTTP header values cause an uncaught URIError. This error can terminate a Node.js process using JaegerPropagator as the active propagator. The issue is fixed in version 2.9.0.

The vulnerability in open-telemetry's opentelemetry-js client affects versions before 2.9.0. The @opentelemetry/propagator-jaeger component decodes incoming uber-trace-id and uberctx-* HTTP headers using decodeURIComponent() without handling potential decode errors. An unauthenticated remote attacker can send a specially crafted malformed percent-encoded value that triggers an uncaught URIError exception, causing the Node.js process to terminate unexpectedly. This denial-of-service condition is resolved in version 2.9.0.

Detailed information about CVE-2026-59892: CWE-248: Uncaught Exception in open-telemetry opentelemetry-js affecting open-telemetry opentelemetry-js. Get real-ti

CVE-2026-59892: CWE-248: Uncaught Exception in open-telemetry opentelemetry-js - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-59892: CWE-248: Uncaught Exception in open-telemetry opentelemetry-js


Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release UpdateCVE-2026-5038 0 Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub user experience that simplifies the automation experience for Ansible users of all skill levels. The Ansible plug-ins provide curated content and features to accelerate Ansible learner onboarding and streamline Ansible use case adoption across your organization. HighVulnerability#gcve #csaf #cve-2026-5038 Join the discussion	GCVE Database	09/28/2026, 16:29:02 UTC Added: 07/30/2026, 05:46:42 UTC
CVE-2026-59892: CWE-248: Uncaught Exception in open-telemetry opentelemetry-jsCVE-2026-59892 0 OpenTelemetry JavaScript versions prior to 2.9.0 contain a vulnerability in the @opentelemetry/propagator-jaeger module where malformed percent-encoded HTTP header values cause an uncaught URIError. This error can terminate a Node.js process using JaegerPropagator as the active propagator. The issue is fixed in version 2.9.0. HighVulnerability#cve #cve-2026-59892 #cwe-248 Join the discussion	CVE Database V5	07/08/2026, 16:03:58 UTC Added: 07/08/2026, 16:29:08 UTC

Threats Tagged 'cve-2026-59892'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-59892'

Lead Pen Test Professional