Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

multer

Multer's diskStorage engine has a vulnerability where aborted multipart uploads can leave orphaned files on disk. This occurs in a brief window before the storage engine assigns the file path, allowing unauthenticated attackers to cause denial of service by exhausting disk space. The issue affects versions from 2.2.0 up to but not including 2.4.0. The vulnerability is a partial regression of a previous fix (CVE-2026-5038). No workarounds are available, but upgrading to version 2.4.0 or higher resolves the issue.

Multer's diskStorage can leave complete orphaned files on disk when a multipart upload is aborted before the storage engine assigns the file path. The previous fix for CVE-2026-5038 only cleaned up uploads that already had a path assigned, missing uploads aborted in this window. An unauthenticated attacker can send aborted requests to any route using disk storage to accumulate orphaned files, potentially exhausting the upload or system temporary directory. The vulnerability is widened if asynchronous destination or filename functions are used. The issue affects multer versions >=2.2.0 and <2.4.0. Users should upgrade to version 2.4.0 or later to remediate.

Detailed information about multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads (CVE-2026-88932) affecting null multer. Get real-t

multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads (CVE-2026-88932) - Live Threat Intelligence - Threat Radar | OffSeq.com

multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads (CVE-2026-88932)

Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub
user experience that simplifies the automation experience for Ansible users of all skill levels.
The Ansible plug-ins provide curated content and features to accelerate Ansible learner
onboarding and streamline Ansible use case adoption across your organization.

The Red Hat Developer Hub (RHDH) 1.10.3 Plugin Catalog release includes plugins that are extensible but contain multiple security issues, notably CVE-2026-13149. This CVE describes a vulnerability in the widely used npm package brace-expansion, where the expand() function can be exploited by an attacker supplying crafted input with consecutive non-expanding brace groups. This triggers exponential-time complexity, causing significant CPU resource consumption and event-loop blocking, resulting in denial of service. The vulnerability is typically introduced transitively via minimatch or glob dependencies. No practical mitigation exists other than upgrading to a fixed version of brace-expansion when available. The Red Hat advisory does not currently provide a fix for this vulnerability or the other listed CVEs in this release.

Detailed information about Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. affecting Red Hat Product Security Red Hat

Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:48126

https://access.redhat.com/security/cve/CVE-2026-13149

https://access.redhat.com/security/cve/CVE-2026-13676

https://access.redhat.com/security/cve/CVE-2026-45740

https://access.redhat.com/security/cve/CVE-2026-46625

https://access.redhat.com/security/cve/CVE-2026-48068

https://access.redhat.com/security/cve/CVE-2026-48069

https://access.redhat.com/security/cve/CVE-2026-48801

https://access.redhat.com/security/cve/CVE-2026-49978

https://access.redhat.com/security/cve/CVE-2026-5038

https://access.redhat.com/security/cve/CVE-2026-5079

https://access.redhat.com/security/cve/CVE-2026-59869

https://access.redhat.com/security/cve/CVE-2026-59877

https://access.redhat.com/security/updates/classification/

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://redhat.atlassian.net/browse/RHIDP-15065

https://redhat.atlassian.net/browse/RHIDP-15162

https://redhat.atlassian.net/browse/RHIDP-15197

https://access.redhat.com/errata/RHSA-2026:49642

https://access.redhat.com/security/cve/CVE-2026-42504

https://access.redhat.com/security/cve/CVE-2026-59892

https://redhat.atlassian.net/browse/RHDHBUGS-3455

https://access.redhat.com/errata/RHSA-2026:52768

https://access.redhat.com/security/cve/CVE-2026-48712

Canonical URL

https://access.redhat.com/errata/RHSA-2026:72712

https://access.redhat.com/security/cve/CVE-2026-19534

https://access.redhat.com/security/cve/CVE-2026-47683

https://access.redhat.com/security/cve/CVE-2026-55553

https://access.redhat.com/security/cve/CVE-2026-59879

https://access.redhat.com/security/cve/CVE-2026-82417

https://access.redhat.com/security/cve/CVE-2026-84375

https://access.redhat.com/security/cve/CVE-2026-87776

https://access.redhat.com/security/cve/CVE-2026-88932

https://access.redhat.com/security/cve/CVE-2026-89011

https://access.redhat.com/security/cve/CVE-2026-92000

https://access.redhat.com/security/cve/CVE-2026-92942

https://access.redhat.com/security/cve/CVE-2026-92958

https://access.redhat.com/security/cve/CVE-2026-92959

https://access.redhat.com/security/cve/CVE-2026-92961

https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform

Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update


multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads (CVE-2026-88932)CVE-2026-88932 0 Multer's diskStorage engine has a vulnerability where aborted multipart uploads can leave orphaned files on disk. This occurs in a brief window before the storage engine assigns the file path, allowing unauthenticated attackers to cause denial of service by exhausting disk space. The issue affects versions from 2.2.0 up to but not including 2.4.0. The vulnerability is a partial regression of a previous fix (CVE-2026-5038). No workarounds are available, but upgrading to version 2.4.0 or higher resolves the issue. MediumVulnerability#gcve #osv #ghsa-3pph-fpjx-jg34 Join the discussion	GCVE Database	09/28/2026, 21:34:58 UTC Added: 09/29/2026, 04:41:43 UTC
Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release UpdateCVE-2026-5038 0 Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub user experience that simplifies the automation experience for Ansible users of all skill levels. The Ansible plug-ins provide curated content and features to accelerate Ansible learner onboarding and streamline Ansible use case adoption across your organization. HighVulnerability#gcve #csaf #cve-2026-5038 Join the discussion	GCVE Database	09/28/2026, 16:29:02 UTC Added: 07/30/2026, 05:46:42 UTC

Threats Tagged 'cve-2026-88932'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-88932'

Lead Pen Test Professional