https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:23:37.797343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-22839 cnvd-2020-22839 2026-10-02T16:23:37.897080+00:00 cnvd-2020-22839 https://cve.radiocsirt.org/vuln/euvd-2026-59091 EUVD-2026-59091 2026-10-02T16:23:37.897117+00:00 EUVD-2026-59091 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19191 fkie_cve-2019-19191 2026-10-02T16:23:37.897132+00:00

Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow.

 https://cve.radiocsirt.org/vuln/ghsa-gcm7-32c7-5wrq GHSA-gcm7-32c7-5wrq 2026-10-02T16:23:37.897161+00:00

Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow.

 https://cve.radiocsirt.org/vuln/gsd-2019-19191 gsd-2019-19191 2026-10-02T16:23:37.897177+00:00 gsd-2019-19191 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0020-1 openSUSE-SU-2020:0020-1 — Security update for shibboleth-sp 2026-10-02T16:23:37.897188+00:00

Security update for shibboleth-sp

 https://cve.radiocsirt.org/vuln/suse-su-2019:3386-1 SUSE-SU-2019:3386-1 — Security update for shibboleth-sp 2026-10-02T16:23:37.897205+00:00

Security update for shibboleth-sp