Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

emacs

This update for emacs fixes the following issues:

Security issues fixed:

- Arbitrary code execution when opening a specially crafted file (bsc#1275941).
- CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted
  image with large dimensions and an elevated max color index is processed (bsc#1276264).
- CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted filenames
  (bsc#1275927).

Other updates and bugfixes:

- Fix memory leak in wayland port (bsc#1271643).

CVE-2026-77219 is an integer overflow vulnerability in GNU Emacs's PBM/PPM/PGM image loader present before versions 27.2-19.oe2203sp4, 29.1-9.oe2403sp1, 29.1-9.oe2403sp3, 29.1-10.oe2403sp4, and 27.1-18.oe2003sp4. The vulnerability occurs because the image loader multiplies image dimensions and channel count using signed integer arithmetic, which can overflow and wrap to a negative value. This bypasses the bounds check and causes the pixel reader to access heap memory beyond the allocated buffer, leaking heap contents. These leaked contents are interpreted as pixel color values and rendered on screen. The vulnerability allows information disclosure but does not enable code execution or privilege escalation.

Detailed information about Security update for emacs affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation strateg

Security update for emacs - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1271643

SUSE Bug 1275927

SUSE Bug 1275941

SUSE Bug 1276264

SUSE CVE CVE-2026-77219 page

SUSE CVE CVE-2026-79992 page

URL for SUSE-SU-2026:23589-1

E-Mail link for SUSE-SU-2026:23589-1

Security update for emacs

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.

A flaw in Emacs TRAMP on Red Hat Enterprise Linux 10 allows local attackers to execute arbitrary OS commands due to improper neutralization of special elements in login arguments. TRAMP concatenates these arguments without proper sanitization before passing them to a local shell. An attacker with local access can exploit this by tricking a user into processing a maliciously crafted filename, leading to arbitrary code execution. The vulnerability is classified as CWE-78 (OS Command Injection) and has a CVSS v3.1 score of 7.8 (High).

Detailed information about CVE-2026-79992: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Red Hat Red Hat Enterpr

CVE-2026-79992: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-79992: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Red Hat Red Hat Enterprise Linux 10


Security update for emacsCVE-2026-77219 0 This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color index is processed (bsc#1276264). - CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted filenames (bsc#1275927). Other updates and bugfixes: - Fix memory leak in wayland port (bsc#1271643). HighVulnerability#gcve #csaf #cve-2026-77219 Join the discussion	GCVE Database	08/31/2026, 12:20:18 UTC Added: 09/17/2026, 01:58:54 UTC
CVE-2026-79992: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Red Hat Red Hat Enterprise Linux 10CVE-2026-79992 0 A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution. HighVulnerability#cve #cve-2026-79992 #gcve Join the discussion	CVE Database V5	08/25/2026, 17:16:28 UTC Added: 08/25/2026, 17:22:41 UTC

Threats Tagged 'cve-2026-79992'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-79992'

Lead Pen Test Professional