https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:28:16.250763+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-46722 EUVD-2026-46722 2026-10-04T15:28:16.383185+00:00 EUVD-2026-46722 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27839 fkie_cve-2020-27839 2026-10-04T15:28:16.383242+00:00

A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/ghsa-2c8x-3ppx-9gj3 GHSA-2c8x-3ppx-9gj3 2026-10-04T15:28:16.383285+00:00

A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/gsd-2020-27839 gsd-2020-27839 2026-10-04T15:28:16.383306+00:00 gsd-2020-27839 https://cve.radiocsirt.org/vuln/rhsa-2021:2445 RHSA-2021:2445 — Red Hat Security Advisory: Red Hat Ceph Storage 4.2 Security and Bug Fix Update 2026-10-04T15:28:16.383318+00:00

ceph-dashboard: Don't use Browser's LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers ceph-dashboard: Cross-site scripting via token Cookie ceph: Unauthorized global_id reuse in cephx

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27839 UBUNTU-CVE-2020-27839 2026-10-04T15:28:16.383345+00:00

Affected: Ubuntu:20.04:LTS: ceph

A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2729 WID-SEC-W-2023-2729 — Red Hat Ceph Storage: Mehrere Schwachstellen 2026-10-04T15:28:16.383368+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Ceph Storage ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.