https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:16:07.425673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07708 cnvd-2015-07708 2026-10-03T00:16:07.502415+00:00 cnvd-2015-07708 https://cve.radiocsirt.org/vuln/euvd-2026-93271 EUVD-2026-93271 2026-10-03T00:16:07.502458+00:00 EUVD-2026-93271 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5253 fkie_cve-2015-5253 2026-10-03T00:16:07.502480+00:00

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

 https://cve.radiocsirt.org/vuln/ghsa-3336-h95j-hvvf GHSA-3336-h95j-hvvf — Improper Access Control in Apache CXF 2026-10-03T00:16:07.502531+00:00

Affected: Maven: org.apache.cxf:cxf-rt-rs-security-sso-saml

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

 https://cve.radiocsirt.org/vuln/gsd-2015-5253 gsd-2015-5253 2026-10-03T00:16:07.502582+00:00 gsd-2015-5253 https://cve.radiocsirt.org/vuln/rhsa-2016:0321 RHSA-2016:0321 — Red Hat Security Advisory: Red Hat JBoss Fuse 6.2.1 update 2026-10-03T00:16:07.502607+00:00

apache-cxf: SAML SSO processing is vulnerable to wrapping attack

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T00:16:07.502636+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.