https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:18:48.948224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-17731 cnvd-2018-17731 2026-10-03T01:18:48.952891+00:00 cnvd-2018-17731 https://cve.radiocsirt.org/vuln/euvd-2026-64964 EUVD-2026-64964 2026-10-03T01:18:48.952940+00:00 EUVD-2026-64964 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10912 fkie_cve-2018-10912 2026-10-03T01:18:48.952963+00:00

keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.

 https://cve.radiocsirt.org/vuln/ghsa-h7j7-pw3v-3v3x GHSA-h7j7-pw3v-3v3x — Moderate severity vulnerability that affects org.keycloak:keycloak-core 2026-10-03T01:18:48.953009+00:00

Affected: Maven: org.keycloak:keycloak-core

keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.

 https://cve.radiocsirt.org/vuln/gsd-2018-10912 gsd-2018-10912 2026-10-03T01:18:48.953034+00:00 gsd-2018-10912 https://cve.radiocsirt.org/vuln/rhsa-2018:2428 RHSA-2018:2428 — Red Hat Security Advisory: Red Hat Single Sign-On 7.2.4 security update 2026-10-03T01:18:48.953046+00:00

cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) keycloak: infinite loop in session replacement leading to denial of service bouncycastle: flaw in the low-level interface to RSA key pair generator