Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here:
  *  https://w4ke.info/2025/06/18/funky-chunks.html

  *  https://w4ke.info/2025/10/29/funky-chunks-2.html


Jetty terminates chunk extension parsing at \r\n inside quoted strings instead of treating this as an error.




POST / HTTP/1.1
Host: localhost
Transfer-Encoding: chunked

1;ext="val
X
0

GET /smuggled HTTP/1.1
...





Note how the chunk extension does not close the double quotes, and it is able to inject a smuggled request.

The vulnerability CVE-2026-2332 in Eclipse Jetty arises from the HTTP/1.1 parser's mishandling of chunk extensions in chunked transfer encoding. Specifically, the parser terminates chunk extension parsing at a CRLF inside quoted strings rather than treating this as an error, allowing an attacker to craft chunked requests with unterminated quoted strings in chunk extensions. This enables HTTP request smuggling attacks by injecting additional HTTP requests within the body of a legitimate request. The flaw is similar to the "funky chunks" techniques documented in external research. Affected versions include Eclipse Jetty versions >=4.18 and <4.18.1, 9.4.0, 10.0.0, 11.0.0, 12.0.0, and 12.1.0, as well as Red Hat builds incorporating these versions. Red Hat has issued security advisories and updates to mitigate this vulnerability.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.1.GA) affecting Red

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.1.GA) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:22453

https://access.redhat.com/security/updates/classification/#important

https://access.redhat.com/security/cve/CVE-2026-40858

https://access.redhat.com/security/cve/CVE-2026-40860

https://access.redhat.com/security/cve/CVE-2026-6857

https://access.redhat.com/security/cve/CVE-2026-2332

2458187

2460003

2463172

2463179

Canonical URL

SAT-42697

SAT-47597

SAT-47598

SAT-47599

SAT-47601

SAT-47602

SAT-47604

SAT-47605

Reference

CVE-2026-2332: CWE-444 Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') in Eclipse Foundation Eclipse Jetty

Threats Tagged 'ghsa-355h-qmc2-wpwf'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ghsa-355h-qmc2-wpwf'

Lead Pen Test Professional