Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

node-qs

A vulnerability in the Node.js qs library causes qs.stringify to throw a TypeError when serializing an object whose own constructor property has a truthy, non-callable isBuffer member. Red Hat has issued an advisory for Red Hat Hardened Images RPMs, including an update to the grafana13.2 package, addressing this and other vulnerabilities. The update is available and should be applied to affected systems. No active exploitation has been reported.

The Node.js qs library has a vulnerability (CVE-2026-82417) where the qs.stringify function throws a TypeError if it attempts to serialize an object whose constructor property contains a truthy but non-callable isBuffer member. This issue can cause denial of service by crashing the serialization process. Red Hat's advisory for Hardened Images RPMs, including the grafana13.2 package update to version 13.2.1-0.1.hum1, addresses this and multiple other security vulnerabilities. The advisory provides updated RPMs for aarch64 and x86_64 architectures. No exploit details or active exploitation in the wild have been reported.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:63164

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-82562

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-82417

Canonical URL

https://access.redhat.com/errata/RHSA-2026:62544

https://access.redhat.com/security/cve/CVE-2026-17033

https://access.redhat.com/security/cve/CVE-2026-19197

https://access.redhat.com/security/cve/CVE-2026-21723

https://access.redhat.com/security/cve/CVE-2026-9765

https://access.redhat.com/security/cve/CVE-2026-8595

https://access.redhat.com/security/cve/CVE-2026-33382

https://access.redhat.com/security/cve/CVE-2026-8609

https://access.redhat.com/security/cve/CVE-2026-84375

Node qs: Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. (CVE-2026-82417)

Threats Tagged 'ubuntu-cve-2026-82417'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-82417'

Lead Pen Test Professional