https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:03:21.535737+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-35556 EUVD-2026-35556 2026-10-03T15:03:21.738594+00:00 EUVD-2026-35556 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1729 fkie_cve-2020-1729 2026-10-03T15:03:21.738637+00:00

A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2

 https://cve.radiocsirt.org/vuln/ghsa-54fx-gm74-q676 GHSA-54fx-gm74-q676 — Permissions bypass in SmallRye 2026-10-03T15:03:21.738681+00:00

Affected: Maven: io.smallrye.config:smallrye-config

A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2

 https://cve.radiocsirt.org/vuln/gsd-2020-1729 gsd-2020-1729 2026-10-03T15:03:21.738707+00:00 gsd-2020-1729 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 RHSA-2020:2058 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 security update 2026-10-03T15:03:21.738720+00:00

jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header undertow: invalid HTTP request with large chunk size

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123 WID-SEC-W-2025-2123 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T15:03:21.738758+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.