Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A command injection vulnerability exists in rpm when installing or rebuilding source RPMs with source or spec file basenames containing a %() macro construct. This flaw allows execution of arbitrary shell commands via popen() as the invoking user, typically non-root, by processing a crafted .src.rpm file.

CVE-2026-95521 describes a command injection flaw in the rpm package manager. The vulnerability occurs during the installation or rebuilding of source RPMs whose source or spec file basenames include a %() macro construct. This causes rpm to execute attacker-controlled shell commands through popen() while relocating the source file list. The flaw enables arbitrary command execution with the privileges of the invoking user, usually non-root, simply by processing a malicious .src.rpm file.

A command injection vulnerability exists in rpm when installing or rebuilding source RPMs with source or spec file basenames containing a %() macro construct. This flaw allows execution of arbitrary shell commands via popen() as the invoking user, typically non-root, by processing a crafted .src.rpm

A command injection flaw was found in rpm. (CVE-2026-95521)

Threats Tagged 'ubuntu-cve-2026-95521'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-95521'

Lead Pen Test Professional