https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:06:56.027882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-41780 cnvd-2020-41780 2026-10-09T22:06:56.031164+00:00 cnvd-2020-41780 https://cve.radiocsirt.org/vuln/euvd-2026-96718 EUVD-2026-96718 2026-10-09T22:06:56.031203+00:00 EUVD-2026-96718 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0161 fkie_cve-2014-0161 2026-10-09T22:06:56.031244+00:00

ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers to spoof remote endpoints via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/ghsa-wf9j-m9fv-92gq GHSA-wf9j-m9fv-92gq — ovirt-engine-sdk-python improper validation of hostname in x.509 certificate 2026-10-09T22:06:56.031298+00:00

Affected: PyPI: ovirt-engine-sdk-python

ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers to spoof remote endpoints via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/gsd-2014-0161 gsd-2014-0161 2026-10-09T22:06:56.031326+00:00 gsd-2014-0161 https://cve.radiocsirt.org/vuln/pysec-2020-245 PYSEC-2020-245 2026-10-09T22:06:56.031339+00:00

Affected: PyPI: ovirt-engine-sdk-python

ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers to spoof remote endpoints via an arbitrary valid certificate.