https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:30:09.250272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04611 bdu:2022-04611 2026-10-05T11:30:09.255423+00:00 bdu:2022-04611 https://cve.radiocsirt.org/vuln/bit-airflow-2020-11982 BIT-airflow-2020-11982 2026-10-05T11:30:09.255463+00:00

Affected: Bitnami: airflow

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 certfr-2022-avi-525 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… 2026-10-05T11:30:09.255498+00:00 certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/cnvd-2020-44094 cnvd-2020-44094 2026-10-05T11:30:09.255516+00:00 cnvd-2020-44094 https://cve.radiocsirt.org/vuln/euvd-2026-40997 EUVD-2026-40997 2026-10-05T11:30:09.255528+00:00 EUVD-2026-40997 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11982 fkie_cve-2020-11982 2026-10-05T11:30:09.255538+00:00

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.

 https://cve.radiocsirt.org/vuln/ghsa-9g2w-5f3v-mfmm GHSA-9g2w-5f3v-mfmm — Insecure default config of Celery worker in Apache Airflow 2026-10-05T11:30:09.255559+00:00

Affected: PyPI: apache-airflow

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.

 https://cve.radiocsirt.org/vuln/gsd-2020-11982 gsd-2020-11982 2026-10-05T11:30:09.255579+00:00 gsd-2020-11982 https://cve.radiocsirt.org/vuln/pysec-2020-16 PYSEC-2020-16 2026-10-05T11:30:09.255590+00:00

Affected: PyPI: apache-airflow

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.