https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:47:37.837570+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2570 ALSA-2023:2570 — Moderate: krb5 security, bug fix, and enhancement update 2026-10-03T23:47:39.154385+00:00

Affected: AlmaLinux:9: krb5-devel, AlmaLinux:9: krb5-libs, AlmaLinux:9: krb5-pkinit, AlmaLinux:9: krb5-server, AlmaLinux:9: krb5-server-ldap, AlmaLinux:9: krb5-workstation, AlmaLinux:9: libkadm5

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

The following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312)

Security Fix(es):

* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-05328 bdu:2020-05328 2026-10-03T23:47:39.154490+00:00 bdu:2020-05328 https://cve.radiocsirt.org/vuln/certfr-2020-avi-738 certfr-2020-avi-738 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Windows</span>. Elles permettent à un… 2026-10-03T23:47:39.154514+00:00 certfr-2020-avi-738 https://cve.radiocsirt.org/vuln/euvd-2026-201795 EUVD-2026-201795 2026-10-03T23:47:39.154534+00:00 EUVD-2026-201795 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17049 fkie_cve-2020-17049 2026-10-03T23:47:39.154548+00:00

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.

 https://cve.radiocsirt.org/vuln/ghsa-g2p3-j47p-8cwj GHSA-g2p3-j47p-8cwj 2026-10-03T23:47:39.154575+00:00

Kerberos Security Feature Bypass Vulnerability

 https://cve.radiocsirt.org/vuln/gsd-2020-17049 gsd-2020-17049 2026-10-03T23:47:39.154590+00:00 gsd-2020-17049 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13200-1 openSUSE-SU-2024:13200-1 — python310-impacket-0.11.0-2.1 on GA media 2026-10-03T23:47:39.154602+00:00

python310-impacket-0.11.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:0137 RHSA-2024:0137 — Red Hat Security Advisory: idm:DL1 security update 2026-10-03T23:47:39.154622+00:00

Kerberos: delegation constrain bypass in S4U2Proxy ipa: Invalid CSRF protection

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T23:47:39.154659+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.