https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:04:55.268169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01572 bdu:2019-01572 2026-10-09T19:04:55.402856+00:00 bdu:2019-01572 https://cve.radiocsirt.org/vuln/cnvd-2019-08976 cnvd-2019-08976 2026-10-09T19:04:55.402897+00:00 cnvd-2019-08976 https://cve.radiocsirt.org/vuln/euvd-2026-49774 EUVD-2026-49774 2026-10-09T19:04:55.402912+00:00 EUVD-2026-49774 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3878 fkie_cve-2019-3878 2026-10-09T19:04:55.402924+00:00

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.

 https://cve.radiocsirt.org/vuln/ghsa-6gx9-985p-w8c8 GHSA-6gx9-985p-w8c8 2026-10-09T19:04:55.402956+00:00

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.

 https://cve.radiocsirt.org/vuln/gsd-2019-3878 gsd-2019-3878 2026-10-09T19:04:55.402972+00:00 gsd-2019-3878 https://cve.radiocsirt.org/vuln/rhsa-2019:0746 RHSA-2019:0746 — Red Hat Security Advisory: httpd24-httpd and httpd24-mod_auth_mellon security update 2026-10-09T19:04:55.402983+00:00

httpd: privilege escalation from modules scripts mod_auth_mellon: authentication bypass in ECP flow

 https://cve.radiocsirt.org/vuln/rhsa-2019:0766 RHSA-2019:0766 — Red Hat Security Advisory: mod_auth_mellon security and bug fix update 2026-10-09T19:04:55.403003+00:00

mod_auth_mellon: open redirect in logout url when using URLs with backslashes mod_auth_mellon: authentication bypass in ECP flow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3878 UBUNTU-CVE-2019-3878 2026-10-09T19:04:55.403020+00:00

Affected: Ubuntu:16.04:LTS: libapache2-mod-auth-mellon, Ubuntu:18.04:LTS: libapache2-mod-auth-mellon, Ubuntu:20.04:LTS: libapache2-mod-auth-mellon

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.