https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:17.550631+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99240 EUVD-2026-99240 2026-10-02T17:29:17.566211+00:00 EUVD-2026-99240 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3472 fkie_cve-2014-3472 2026-10-02T17:29:17.566250+00:00

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-x926-v8v9-j4mp GHSA-x926-v8v9-j4mp 2026-10-02T17:29:17.566283+00:00

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-3472 gsd-2014-3472 2026-10-02T17:29:17.566299+00:00 gsd-2014-3472 https://cve.radiocsirt.org/vuln/rhsa-2014:1019 RHSA-2014:1019 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 update 2026-10-02T17:29:17.566311+00:00

httpd: mod_deflate denial of service netty: DoS via memory exhaustion during data aggregation httpd: mod_status heap-based buffer overflow Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter httpd: mod_cgid denial of service WS: Incomplete fix for CVE-2013-2133 Security: Invalid EJB caller role check implementation