https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T01:35:35.082755+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09903 bdu:2025-09903 2026-10-13T01:35:35.089582+00:00 bdu:2025-09903 https://cve.radiocsirt.org/vuln/bit-spark-2020-9480 BIT-spark-2020-9480 2026-10-13T01:35:35.089615+00:00

Affected: Bitnami: spark

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even without the shared key. This can be leveraged to execute shell commands on the host machine. This does not affect Spark clusters using other resource managers (YARN, Mesos, etc).

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-13T01:35:35.089649+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cnvd-2020-34445 cnvd-2020-34445 2026-10-13T01:35:35.089668+00:00 cnvd-2020-34445 https://cve.radiocsirt.org/vuln/euvd-2026-39152 EUVD-2026-39152 2026-10-13T01:35:35.089680+00:00 EUVD-2026-39152 https://cve.radiocsirt.org/vuln/fkie_cve-2020-9480 fkie_cve-2020-9480 2026-10-13T01:35:35.089691+00:00

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even without the shared key. This can be leveraged to execute shell commands on the host machine. This does not affect Spark clusters using other resource managers (YARN, Mesos, etc).

 https://cve.radiocsirt.org/vuln/ghsa-wgx7-jwwm-cgjv GHSA-wgx7-jwwm-cgjv — Improper Authentication in Apache Spark 2026-10-13T01:35:35.089714+00:00

Affected: Maven: org.apache.spark:spark-parent_2.11, PyPI: pyspark

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even without the shared key. This can be leveraged to execute shell commands on the host machine. This does not affect Spark clusters using other resource managers (YARN, Mesos, etc).

 https://cve.radiocsirt.org/vuln/gsd-2020-9480 gsd-2020-9480 2026-10-13T01:35:35.089738+00:00 gsd-2020-9480 https://cve.radiocsirt.org/vuln/pysec-2020-95 PYSEC-2020-95 2026-10-13T01:35:35.089749+00:00

Affected: PyPI: pyspark

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even without the shared key. This can be leveraged to execute shell commands on the host machine. This does not affect Spark clusters using other resource managers (YARN, Mesos, etc).