https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:51:51.483015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-182243 EUVD-2026-182243 2026-10-07T04:51:51.595438+00:00 EUVD-2026-182243 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2086 fkie_cve-2010-2086 2026-10-07T04:51:51.595500+00:00

Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.

 https://cve.radiocsirt.org/vuln/ghsa-92cv-wv2c-8899 GHSA-92cv-wv2c-8899 — Apache MyFaces Cross-site Scripting vulnerability 2026-10-07T04:51:51.595543+00:00

Affected: Maven: org.apache.myfaces.core:myfaces-core-module

Apache MyFaces 1.1.7 and 1.2.8 (All previous versions are likely vulnerable), as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.

 https://cve.radiocsirt.org/vuln/gsd-2010-2086 gsd-2010-2086 2026-10-07T04:51:51.595602+00:00 gsd-2010-2086 https://cve.radiocsirt.org/vuln/rhsa-2010:0119 RHSA-2010:0119 — Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.1 update 2026-10-07T04:51:51.595623+00:00

tomcat: unexpected file deletion and/or alteration tomcat: unexpected file deletion in work directory TLS: MITM attacks via session renegotiation MyFaces: XSS via state view