Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

python-tornado

Two security vulnerabilities were identified in the Tornado Python web server framework. The first (CVE-2026-31958) involves improper handling of large multipart request bodies, which could lead to denial of service. The second (CVE-2026-35536) concerns improper validation of characters in cookie values, potentially allowing injection of arbitrary cookie attributes. These issues affect multiple Ubuntu and Red Hat package versions. Fixes are available through standard system updates and Ubuntu Pro Extended Security Maintenance (ESM) for older releases.

The Tornado Python web server and tools had two security issues: CVE-2026-31958, where large multipart request bodies were incorrectly parsed, potentially causing denial of service; and CVE-2026-35536, where cookie values were not properly validated, allowing injection of arbitrary cookie attributes. These vulnerabilities affect various versions of python-tornado packages across multiple Ubuntu LTS releases and Red Hat Enterprise Linux. Vendor advisories from Ubuntu confirm that patches are available and recommend updating to fixed package versions. The issues are tracked under CWE-770 (Allocation of Resources Without Limits or Throttling) and CWE-88 (Argument Injection or Modification).

Detailed information about Python tornado: Tornado is a Python web framework and asynchronous networking library. affecting null python-tornado. Get real-time u

Python tornado: Tornado is a Python web framework and asynchronous networking library. - Live Threat Intelligence - Threat Radar | OffSeq.com

Threats Tagged 'ubuntu-cve-2026-31958'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-31958'

Lead Pen Test Professional