https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:17:35.016214+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96659 EUVD-2026-96659 2026-10-03T00:17:35.087714+00:00 EUVD-2026-96659 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0074 fkie_cve-2014-0074 2026-10-03T00:17:35.087749+00:00

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.

 https://cve.radiocsirt.org/vuln/ghsa-9486-j794-vqc4 GHSA-9486-j794-vqc4 2026-10-03T00:17:35.087782+00:00

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.

 https://cve.radiocsirt.org/vuln/gsd-2014-0074 gsd-2014-0074 2026-10-03T00:17:35.087799+00:00 gsd-2014-0074 https://cve.radiocsirt.org/vuln/rhsa-2014:1351 RHSA-2014:1351 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security update 2026-10-03T00:17:35.087812+00:00

CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy Shiro: successful authentication without specifying user name or password Xalan-Java: insufficient constraints in secure processing feature CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill netty: DoS via memory exhaustion during data aggregation Framework: Information disclosure via SSRF