https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:52:48.918572+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-110271 EUVD-2026-110271 2026-10-03T03:52:48.926268+00:00 EUVD-2026-110271 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1167 fkie_cve-2012-1167 2026-10-03T03:52:48.926303+00:00

The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.

 https://cve.radiocsirt.org/vuln/ghsa-9f9q-j576-jp97 GHSA-9f9q-j576-jp97 2026-10-03T03:52:48.926336+00:00

The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.

 https://cve.radiocsirt.org/vuln/gsd-2012-1167 gsd-2012-1167 2026-10-03T03:52:48.926354+00:00 gsd-2012-1167 https://cve.radiocsirt.org/vuln/rhsa-2012:1013 RHSA-2012:1013 — Red Hat Security Advisory: jbossas security update 2026-10-03T03:52:48.926365+00:00

JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm