https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:14:42.891522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-144993 EUVD-2026-144993 2026-10-04T15:14:42.894533+00:00 EUVD-2026-144993 https://cve.radiocsirt.org/vuln/fkie_cve-2006-6969 fkie_cve-2006-6969 2026-10-04T15:14:42.894567+00:00

Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks.

 https://cve.radiocsirt.org/vuln/ghsa-jg2x-r643-w2ch GHSA-jg2x-r643-w2ch — Jetty Uses Predictable Session Identifiers 2026-10-04T15:14:42.894599+00:00

Affected: Maven: org.eclipse.jetty:jetty-server

Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks.

 https://cve.radiocsirt.org/vuln/gsd-2006-6969 gsd-2006-6969 2026-10-04T15:14:42.894626+00:00 gsd-2006-6969