Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

JVN Japan

golang-1.10

golang-1.6

golang-1.13

golang-1.18

golang-1.16

golang-1.8

golang-1.9

golang-1.14

golang-1.20

golang-1.21

golang-1.22

golang-1.17

golang-1.23

golang-1.24

golang-1.25

A vulnerability in golang-1.10 on Unix systems allows improper symlink resolution when opening files with os.Root. Specifically, if the final path component is a symbolic link and the path ends with a slash, the code may follow the symlink outside the intended root directory. This can lead to unauthorized file access. Multiple Ubuntu golang package versions are affected. No patch information is provided.

On Unix systems, the golang os.Root file opening function improperly follows symbolic links when the final path component ends with a slash and is a symlink. This behavior allows access to files outside the intended root directory, potentially leading to unauthorized file access. The issue affects numerous Ubuntu golang package versions spanning Ubuntu 14.04 LTS through 26.04 LTS. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Detailed information about UBUNTU-CVE-2026-39822 affecting null golang-1.10. Get real-time updates, technical details, and mitigation strategies.

UBUNTU-CVE-2026-39822 - Live Threat Intelligence - Threat Radar | OffSeq.com

UBUNTU-CVE-2026-39822

Threats Tagged 'ubuntu-cve-2026-39822'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-39822'

Lead Pen Test Professional

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility