https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:28:25.676415+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02190 bdu:2022-02190 2026-10-03T06:28:25.786918+00:00 bdu:2022-02190 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0839 certfr-2023-avi-0839 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T06:28:25.786958+00:00 certfr-2023-avi-0839 https://cve.radiocsirt.org/vuln/cleanstart-2026-dy91786 CLEANSTART-2026-DY91786 — Security fix for CVE-2016-1000027 applied in: activemq 5.19.8-r3 2026-10-03T06:28:25.786978+00:00

Affected: CleanStart: activemq

Security vulnerability affects the activemq package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2020-03821 cnvd-2020-03821 2026-10-03T06:28:25.787008+00:00 cnvd-2020-03821 https://cve.radiocsirt.org/vuln/euvd-2026-88911 EUVD-2026-88911 2026-10-03T06:28:25.787051+00:00 EUVD-2026-88911 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1000027 fkie_cve-2016-1000027 2026-10-03T06:28:25.787063+00:00

Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data.

 https://cve.radiocsirt.org/vuln/ghsa-4wrc-f8pq-fpqp GHSA-4wrc-f8pq-fpqp — Pivotal Spring Framework contains unsafe Java deserialization methods 2026-10-03T06:28:25.787088+00:00

Affected: Maven: org.springframework:spring-web

Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required.

Maintainers recommend investigating alternative components or a potential mitigating control. Version 4.2.6 and 3.2.17 contain [enhanced documentation](https://github.com/spring-projects/spring-framework/commit/5cbe90b2cd91b866a5a9586e460f311860e11cfa) advising users to take precautions against unsafe Java deserialization, version 5.3.0 [deprecate the impacted classes](https://github.com/spring-projects/spring-framework/issues/25379) and version 6.0.0 [removed it entirely](https://github.com/spring-projects/spring-framework/issues/27422).

 https://cve.radiocsirt.org/vuln/gsd-2016-1000027 gsd-2016-1000027 2026-10-03T06:28:25.787115+00:00 gsd-2016-1000027 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1060 WID-SEC-W-2023-1060 — NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service 2026-10-03T06:28:25.787127+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder Dateien zu manipulieren.