https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T16:38:20.638494+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-00013 cnvd-2017-00013 2026-10-17T16:38:20.641497+00:00 cnvd-2017-00013 https://cve.radiocsirt.org/vuln/euvd-2026-88200 EUVD-2026-88200 2026-10-17T16:38:20.641530+00:00 EUVD-2026-88200 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10027 fkie_cve-2016-10027 2026-10-17T16:38:20.641544+00:00

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response.

 https://cve.radiocsirt.org/vuln/ghsa-66pq-hqv5-228g GHSA-66pq-hqv5-228g — Smack allows the bypass of TLS protections 2026-10-17T16:38:20.641573+00:00

Affected: Maven: org.igniterealtime.smack:smack-core

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response.

 https://cve.radiocsirt.org/vuln/gsd-2016-10027 gsd-2016-10027 2026-10-17T16:38:20.641597+00:00 gsd-2016-10027