Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This update includes the following RPMs:

tempo3.0:
  * tempo3.0-3.0.3-0.2.hum1 (aarch64, x86_64)
  * tempo3.0-3.0.3-0.2.hum1.src (src)

Security Fix(es):

tempo3.0:
  * CVE-2026-81092

CVE-2026-81092 is a vulnerability in the mcp-go component used by Red Hat Hardened Images RPMs (tempo3.0) where the Host header in HTTP requests is not properly validated in the StreamableHTTPServer and SSEServer transports. This allows a remote attacker to perform a DNS rebinding attack by directing a controlled domain name to the loopback address, bypassing local network restrictions and potentially accessing local services. The vulnerability is classified under CWE-918 (Server-Side Request Forgery). Red Hat notes that exploitation requires a browser running JavaScript on the same host as the mcp-go HTTP server, a condition not met in typical Red Hat Kubernetes/OpenShift deployments. Red Hat has released a fixed version of the affected RPMs incorporating mcp-go v0.56.0, which includes the necessary Host header validation. Until the update is applied, mitigations such as network restrictions and reverse proxy Host header validation are recommended.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update affecting Red Hat Product Security Red Hat. Get real-time upd

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:62537

https://access.redhat.com/security/cve/CVE-2026-81092

https://access.redhat.com/security/updates/classification/

https://images.redhat.com/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:54874

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

mcp-go

CVE-2026-81092 is a high-severity vulnerability in mark3labs mcp-go prior to version 0.56.0. The software accepted HTTP requests on its loopback interface without validating the Host header, allowing cross-origin requests from browser pages to access local services. This flaw could enable a malicious web page to interact with local servers that assume only local software can connect. Version 0.56.0 introduced validation to reject loopback requests with non-loopback Host headers, mitigating this issue.

The vulnerability in mcp-go versions before 0.56.0 involves the lack of Host header validation on HTTP transports bound to the loopback interface. Specifically, StreamableHTTPServer.ServeHTTP and SSEServer.ServeHTTP served requests regardless of the Host header value, and the SSE transport allowed any origin by default. This allowed a browser page controlled by an attacker to direct requests to the loopback address with arbitrary Host headers, potentially invoking local tools and reading resources exposed by the server under the assumption that only local clients would connect. The fix in version 0.56.0 adds server/http_localhost.go, which rejects loopback-bound requests with Host headers that are not loopback names, securing both HTTP transports.

Detailed information about CVE-2026-81092: Origin Validation Error in mark3labs mcp-go affecting mark3labs mcp-go. Get real-time updates, technical details, and

CVE-2026-81092: Origin Validation Error in mark3labs mcp-go - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-81092: Origin Validation Error in mark3labs mcp-go


Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateCVE-2026-81092 0 This update includes the following RPMs: tempo3.0: * tempo3.0-3.0.3-0.2.hum1 (aarch64, x86_64) * tempo3.0-3.0.3-0.2.hum1.src (src) Security Fix(es): tempo3.0: * CVE-2026-81092 MediumVulnerability#gcve #csaf #cve-2026-81092 Join the discussion	GCVE Database	09/02/2026, 08:21:17 UTC Added: 09/05/2026, 14:21:47 UTC
CVE-2026-81092: Origin Validation Error in mark3labs mcp-goCVE-2026-81092 0 CVE-2026-81092 is a high-severity vulnerability in mark3labs mcp-go prior to version 0.56.0. The software accepted HTTP requests on its loopback interface without validating the Host header, allowing cross-origin requests from browser pages to access local services. This flaw could enable a malicious web page to interact with local servers that assume only local software can connect. Version 0.56.0 introduced validation to reject loopback requests with non-loopback Host headers, mitigating this issue. HighVulnerability#cve #cve-2026-81092 Join the discussion	CVE Database V5	08/27/2026, 14:50:33 UTC Added: 08/27/2026, 16:54:07 UTC

Threats Tagged 'cve-2026-81092'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-81092'

Lead Pen Test Professional