Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

netty

A vulnerability in Netty's HTTP/2 codec causes incorrect handling of HTTP/1 CONNECT requests when converted to HTTP/2. The component uses the Host header instead of the CONNECT authority-form request-target, allowing an attacker to supply a manipulated Host header. This leads to malformed HTTP/2 CONNECT requests that can bypass tunnel allow-lists and egress policies, resulting in integrity loss.

CVE-2026-93567 is a flaw in Netty's HTTP/2 codec where the conversion of HTTP/1 CONNECT requests to HTTP/2 incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by providing a different Host header, causing the HTTP/2 CONNECT request to have an attacker-controlled authority. This bypasses security controls such as tunnel allow-lists and egress policies, potentially allowing connections to unintended upstream targets and resulting in integrity loss. The issue affects multiple specific Netty versions as listed, and Red Hat products configured as HTTP/1-to-HTTP/2 proxies or gateways are impacted. The CVSS v3.1 score is 7.5 (medium severity) with an integrity impact but no confidentiality or availability impact. No known exploits in the wild have been reported. Mitigation guidance and fixed versions are available from the Netty GitHub security advisory.

Detailed information about A flaw was found in Netty's HTTP/2 codec. (CVE-2026-93567) affecting null netty. Get real-time updates, technical details, and mitiga

A flaw was found in Netty's HTTP/2 codec. (CVE-2026-93567) - Live Threat Intelligence - Threat Radar | OffSeq.com

A flaw was found in Netty's HTTP/2 codec. (CVE-2026-93567)

Threats Tagged 'ubuntu-cve-2026-93567'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-93567'

Lead Pen Test Professional