https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:14:26.922652+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113137 EUVD-2026-113137 2026-10-03T11:14:26.934572+00:00 EUVD-2026-113137 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5629 fkie_cve-2012-5629 2026-10-03T11:14:26.934611+00:00

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.

 https://cve.radiocsirt.org/vuln/ghsa-m4f6-9xf8-2whr GHSA-m4f6-9xf8-2whr 2026-10-03T11:14:26.934643+00:00

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.

 https://cve.radiocsirt.org/vuln/gsd-2012-5629 gsd-2012-5629 2026-10-03T11:14:26.934659+00:00 gsd-2012-5629 https://cve.radiocsirt.org/vuln/rhsa-2013:0229 RHSA-2013:0229 — Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 security update 2026-10-03T11:14:26.934670+00:00

JBoss: allows empty password to authenticate against LDAP