Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

The vulnerability CVE-2026-7598 affects the libssh2 library used in Red Hat Hardened Images RPMs. It is an integer overflow in the userauth_password function where manipulated username_len or password_len arguments cause a heap-based buffer overflow. This can crash the application linked to libssh2 and potentially allow arbitrary code execution. Exploitation requires supplying large values to these arguments, typically in applications processing untrusted SSH authentication requests. Red Hat notes that default security mechanisms such as SELinux, ASLR, and NX stack protection reduce the likelihood of successful arbitrary code execution. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound).

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:16736

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-7598

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:7021

CVE-2026-7598 libssh2 userauth.c userauth_password integer overflow - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

libssh2 userauth.c userauth_password integer overflow

libssh2

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.

The vulnerability CVE-2026-7598 in libssh2 up to version 1.11.1 involves an integer overflow in the userauth_password function located in src/userauth.c. The issue arises from improper handling of the username_len and password_len arguments, which can be manipulated to trigger an integer overflow condition. This flaw can be exploited remotely, potentially impacting authentication processes. The patch is referenced by commit 256d04b60d80bf1190e96b0ad1e91b2174d744b1. Red Hat has published advisories referencing this CVE, but their content does not explicitly confirm the availability of a patch or remediation status for affected products.

Detailed information about CVE-2026-7598: Integer Overflow in libssh2 affecting null libssh2. Get real-time updates, technical details, and mitigation strategie

CVE-2026-7598: Integer Overflow in libssh2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-7598: Integer Overflow in libssh2


libssh2 userauth.c userauth_password integer overflowCVE-2026-7598 0 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle HighVulnerability#gcve #csaf #cve-2026-7598 Join the discussion	GCVE Database	05/03/2026, 01:01:24 UTC Added: 06/27/2026, 22:08:16 UTC
CVE-2026-7598: Integer Overflow in libssh2CVE-2026-7598 0 A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue. MediumVulnerability#cve #cve-2026-7598 Join the discussion	CVE Database V5	05/01/2026, 21:30:11 UTC Added: 05/01/2026, 21:36:23 UTC

Threats Tagged 'cve-2026-7598'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-7598'

Lead Pen Test Professional