https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:06:32.850051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03002 bdu:2019-03002 2026-10-02T17:06:33.072019+00:00 bdu:2019-03002 https://cve.radiocsirt.org/vuln/certfr-2019-avi-397 certfr-2019-avi-397 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Windows</span>. Elles permettent à un… 2026-10-02T17:06:33.072087+00:00 certfr-2019-avi-397 https://cve.radiocsirt.org/vuln/cisco-sa-20190813-bluetooth cisco-sa-20190813-bluetooth — Key Negotiation of Bluetooth Vulnerability 2026-10-02T17:06:33.072108+00:00

A weakness in the Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR) protocol core specification exposes a vulnerability that could allow for an unauthenticated, adjacent attacker to perform a man-in-the-middle attack on an encrypted Bluetooth connection. The attack must be performed during negotiation or renegotiation of a paired device connection; existing sessions cannot be attacked. The issue could allow the attacker to reduce the entropy of the negotiated session key that is used to secure a Bluetooth connection between a paired device and a host device. An attacker who can successfully inject a malicious message into a Bluetooth connection during session negotiation or renegotiation could cause the strength of the session key to be susceptible to brute force attack. This advisory will be updated as additional information becomes available. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-169440 EUVD-2026-169440 2026-10-02T17:06:33.072143+00:00 EUVD-2026-169440 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9506 fkie_cve-2019-9506 2026-10-02T17:06:33.072155+00:00

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

 https://cve.radiocsirt.org/vuln/ghsa-5xj4-2499-67mw GHSA-5xj4-2499-67mw 2026-10-02T17:06:33.072179+00:00

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

 https://cve.radiocsirt.org/vuln/gsd-2019-9506 gsd-2019-9506 2026-10-02T17:06:33.072195+00:00 gsd-2019-9506 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2307-1 openSUSE-SU-2019:2307-1 — Security update for the Linux Kernel 2026-10-02T17:06:33.072205+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2019:2975 RHSA-2019:2975 — Red Hat Security Advisory: kernel security and bug fix update 2026-10-02T17:06:33.072224+00:00

kernel: hw: Spectre SWAPGS gadget vulnerability hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)

 https://cve.radiocsirt.org/vuln/suse-su-2019:2648-1 SUSE-SU-2019:2648-1 — Security update for the Linux Kernel 2026-10-02T17:06:33.072242+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9506 UBUNTU-CVE-2019-9506 2026-10-02T17:06:33.072282+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-oracle and 28 more

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.