https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:19:03.724910+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111074 EUVD-2026-111074 2026-10-02T22:19:03.824206+00:00 EUVD-2026-111074 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2377 fkie_cve-2012-2377 2026-10-02T22:19:03.824254+00:00

JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.

 https://cve.radiocsirt.org/vuln/ghsa-jm5c-rgfp-cjhx GHSA-jm5c-rgfp-cjhx 2026-10-02T22:19:03.824297+00:00

JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.

 https://cve.radiocsirt.org/vuln/gsd-2012-2377 gsd-2012-2377 2026-10-02T22:19:03.824315+00:00 gsd-2012-2377 https://cve.radiocsirt.org/vuln/rhsa-2012:1028 RHSA-2012:1028 — Red Hat Security Advisory: JBoss Enterprise BRMS Platform 5.3.0 update 2026-10-02T22:19:03.824327+00:00

Invoker servlets authentication bypass (HTTP verb tampering) JNDI: unauthenticated remote write access is permitted by default JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started