https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T20:49:56.038607+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2016-avi-340 certfr-2016-avi-340 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Windows</span>. Elles permettent à un… 2026-10-26T20:49:56.042199+00:00 certfr-2016-avi-340 https://cve.radiocsirt.org/vuln/cnvd-2016-08486 cnvd-2016-08486 2026-10-26T20:49:56.042235+00:00 cnvd-2016-08486 https://cve.radiocsirt.org/vuln/euvd-2026-86497 EUVD-2026-86497 2026-10-26T20:49:56.042257+00:00 EUVD-2026-86497 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7191 fkie_cve-2016-7191 2026-10-26T20:49:56.042270+00:00

The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.

 https://cve.radiocsirt.org/vuln/ghsa-73jp-3c67-hjfv GHSA-73jp-3c67-hjfv — Authentication Bypass in passport-azure-ad 2026-10-26T20:49:56.042295+00:00

Affected: npm: passport-azure-ad

Affected versions of `passport-azure-ad` do not recognize the `validateIssuer` setting, which allows remote attackers to bypass authentication via a crafted token.

## Recommendation

Version 1.x: Update to version 1.4.6 or later. Version 2.x: Update to version 2.0.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2016-7191 gsd-2016-7191 2026-10-26T20:49:56.042321+00:00 gsd-2016-7191