https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:43:39.529993+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-69757 EUVD-2026-69757 2026-10-04T23:43:39.533423+00:00 EUVD-2026-69757 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19443 fkie_cve-2018-19443 2026-10-04T23:43:39.533456+00:00

The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.

 https://cve.radiocsirt.org/vuln/ghsa-32w7-9whp-cjp9 GHSA-32w7-9whp-cjp9 — Session Fixation in Tryton 2026-10-04T23:43:39.533488+00:00

Affected: PyPI: tryton

The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.

 https://cve.radiocsirt.org/vuln/gsd-2018-19443 gsd-2018-19443 2026-10-04T23:43:39.533513+00:00 gsd-2018-19443 https://cve.radiocsirt.org/vuln/pysec-2018-77 PYSEC-2018-77 2026-10-04T23:43:39.533526+00:00

Affected: PyPI: tryton

The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19443 UBUNTU-CVE-2018-19443 2026-10-04T23:43:39.533545+00:00

Affected: Ubuntu:16.04:LTS: tryton-client, Ubuntu:18.04:LTS: tryton-client, Ubuntu:20.04:LTS: tryton-client, Ubuntu:22.04:LTS: tryton-client, Ubuntu:24.04:LTS: tryton-client, Ubuntu:25.10: tryton-client, Ubuntu:26.04:LTS: tryton-client

The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.