https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:46:31.868994+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318692 EUVD-2026-318692 2026-10-02T19:46:31.889254+00:00 EUVD-2026-318692 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4550 fkie_cve-2012-4550 2026-10-02T19:46:31.889296+00:00

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers (JACC) permissions from being applied, allowing remote attackers to gain unauthorized access to EJBs.

 https://cve.radiocsirt.org/vuln/ghsa-gg53-v4gc-qv5q GHSA-gg53-v4gc-qv5q 2026-10-02T19:46:31.889330+00:00

JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) before 6.0.1, when using role-based authorization for Enterprise Java Beans (EJB) access, does not call the intended authorization modules, which prevents JACC permissions from being applied and allows remote attackers to obtain access to the EJB.

 https://cve.radiocsirt.org/vuln/gsd-2012-4550 gsd-2012-4550 2026-10-02T19:46:31.889348+00:00 gsd-2012-4550 https://cve.radiocsirt.org/vuln/rhsa-2012:1591 RHSA-2012:1591 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update 2026-10-02T19:46:31.889359+00:00

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass