https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:38:41.767429+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-wildfly-2020-1719 BIT-wildfly-2020-1719 2026-10-03T11:38:42.012799+00:00

Affected: Bitnami: wildfly

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

 https://cve.radiocsirt.org/vuln/euvd-2026-35566 EUVD-2026-35566 2026-10-03T11:38:42.012868+00:00 EUVD-2026-35566 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1719 fkie_cve-2020-1719 2026-10-03T11:38:42.012894+00:00

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

 https://cve.radiocsirt.org/vuln/ghsa-p9cf-qjxq-vxw6 GHSA-p9cf-qjxq-vxw6 — Privilege Context Switching Error in wildlfy 2026-10-03T11:38:42.012918+00:00

Affected: Maven: org.wildfly.bom:wildfly

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

 https://cve.radiocsirt.org/vuln/gsd-2020-1719 gsd-2020-1719 2026-10-03T11:38:42.012939+00:00 gsd-2020-1719 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 RHSA-2020:2058 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 security update 2026-10-03T11:38:42.012951+00:00

jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header undertow: invalid HTTP request with large chunk size

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123 WID-SEC-W-2025-2123 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T11:38:42.012992+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.