https://cve.radiocsirt.org Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 07:10:15 +0000 https://cve.radiocsirt.org/vuln/cve-2026-86345 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result https://cve.radiocsirt.org/vuln/cve-2026-86345 Thu, 01 Oct 2026 23:27:47 +0000 https://cve.radiocsirt.org/vuln/cve-2026-86344 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue https://cve.radiocsirt.org/vuln/cve-2026-86344 Thu, 01 Oct 2026 21:29:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103484 pgvector buffer overflow in IVFFlat index build pgvector buffer overflow in IVFFlat index build https://cve.radiocsirt.org/vuln/cve-2026-103484 Thu, 01 Oct 2026 19:49:03 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103884 Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read https://cve.radiocsirt.org/vuln/cve-2026-103884 Thu, 01 Oct 2026 17:16:21 +0000 https://cve.radiocsirt.org/vuln/cve-2026-56098 Rubygem-katello: improper authorization logic allows resource enumeration Rubygem-katello: improper authorization logic allows resource enumeration https://cve.radiocsirt.org/vuln/cve-2026-56098 Thu, 01 Oct 2026 17:14:56 +0000 https://cve.radiocsirt.org/vuln/cve-2026-56097 Rubygem-katello: sql injection in registry proxy via labels Rubygem-katello: sql injection in registry proxy via labels https://cve.radiocsirt.org/vuln/cve-2026-56097 Thu, 01 Oct 2026 17:14:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-12542 Foreman: command injection in foreman-tail Foreman: command injection in foreman-tail https://cve.radiocsirt.org/vuln/cve-2026-12542 Thu, 01 Oct 2026 17:14:49 +0000 https://cve.radiocsirt.org/vuln/cve-2026-12545 Rubygem-hammer_cli: command injection via insecure editor invocation Rubygem-hammer_cli: command injection via insecure editor invocation https://cve.radiocsirt.org/vuln/cve-2026-12545 Thu, 01 Oct 2026 17:14:49 +0000 https://cve.radiocsirt.org/vuln/cve-2026-96658 Foreman: safemode bypass leading to rce Foreman: safemode bypass leading to rce https://cve.radiocsirt.org/vuln/cve-2026-96658 Thu, 01 Oct 2026 16:23:23 +0000 https://cve.radiocsirt.org/vuln/cve-2026-96659 Foreman: excessive permissions for viewer role on preview Foreman: excessive permissions for viewer role on preview https://cve.radiocsirt.org/vuln/cve-2026-96659 Thu, 01 Oct 2026 16:23:23 +0000