https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:36:09.440910+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-45763 EUVD-2026-45763 2026-10-04T19:36:09.531186+00:00 EUVD-2026-45763 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25680 fkie_cve-2020-25680 2026-10-04T19:36:09.531252+00:00

A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/ghsa-h32x-w4cv-wrq9 GHSA-h32x-w4cv-wrq9 2026-10-04T19:36:09.531302+00:00

A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/gsd-2020-25680 gsd-2020-25680 2026-10-04T19:36:09.531334+00:00 gsd-2020-25680 https://cve.radiocsirt.org/vuln/rhsa-2020:4384 RHSA-2020:4384 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP5 security update 2026-10-04T19:36:09.531352+00:00

openssl: Integer overflow in RSAZ modular exponentiation on x86_64 curl: Integer overflows in curl_url_set() function httpd: mod_proxy_uwsgi buffer overflow httpd: mod_http2 concurrent pool usage httpd: allow connecting via SSL to a backend worker when the backend keystore file's ID is 'unknown'