https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:56:35.634872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00025 bdu:2020-00025 2026-10-02T13:56:35.652186+00:00 bdu:2020-00025 https://cve.radiocsirt.org/vuln/bell-cve-2019-11253 Withdrawn: BELL-CVE-2019-11253 — CVE-2019-11253 does not affect BellSoft software 2026-10-02T13:56:35.652222+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T13:56:35.652242+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2025-zg19712 CLEANSTART-2025-ZG19712 — Improper input validation in the Kubernetes API server in versions v1 2026-10-02T13:56:35.652259+00:00

Affected: CleanStart: containerd

Security vulnerability affects the containerd package. Improper input validation in the Kubernetes API server in versions v1.

 https://cve.radiocsirt.org/vuln/euvd-2026-175917 EUVD-2026-175917 2026-10-02T13:56:35.652286+00:00 EUVD-2026-175917 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11253 fkie_cve-2019-11253 2026-10-02T13:56:35.652298+00:00

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.

 https://cve.radiocsirt.org/vuln/ghsa-pmqp-h87c-mr78 GHSA-pmqp-h87c-mr78 — XML Entity Expansion and Improper Input Validation in Kubernetes API server 2026-10-02T13:56:35.652354+00:00

Affected: Go: k8s.io/kubernetes

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.

### Specific Go Packages Affected k8s.io/kubernetes/pkg/apiserver

 https://cve.radiocsirt.org/vuln/gsd-2019-11253 gsd-2019-11253 2026-10-02T13:56:35.652395+00:00 gsd-2019-11253 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10901-1 openSUSE-SU-2024:10901-1 — kubernetes-apiserver-1.22.2-21.2 on GA media 2026-10-02T13:56:35.652407+00:00

kubernetes-apiserver-1.22.2-21.2 on GA media

 https://cve.radiocsirt.org/vuln/rhea-2019:3809 RHEA-2019:3809 — Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.0.2 RPMs 2026-10-02T13:56:35.652428+00:00

kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-02T13:56:35.652444+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.