https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:31:18.915981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-solr-2020-9492 BIT-solr-2020-9492 2026-10-03T13:31:19.016992+00:00

Affected: Bitnami: solr

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0 to 3.1.3, and 2.0.0 to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-545 certfr-2021-avi-545 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Elles permettent à un attaquant de provoquer une… 2026-10-03T13:31:19.017053+00:00 certfr-2021-avi-545 https://cve.radiocsirt.org/vuln/cnvd-2021-11848 cnvd-2021-11848 2026-10-03T13:31:19.017074+00:00 cnvd-2021-11848 https://cve.radiocsirt.org/vuln/euvd-2026-39161 EUVD-2026-39161 2026-10-03T13:31:19.017088+00:00 EUVD-2026-39161 https://cve.radiocsirt.org/vuln/fkie_cve-2020-9492 fkie_cve-2020-9492 2026-10-03T13:31:19.017098+00:00

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

 https://cve.radiocsirt.org/vuln/ghsa-f8vc-wfc8-hxqh GHSA-f8vc-wfc8-hxqh — Improper Privilege Management in Apache Hadoop 2026-10-03T13:31:19.017120+00:00

Affected: Maven: org.apache.hadoop:hadoop-common

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

 https://cve.radiocsirt.org/vuln/gsd-2020-9492 gsd-2020-9492 2026-10-03T13:31:19.017142+00:00 gsd-2020-9492 https://cve.radiocsirt.org/vuln/oesa-2021-1201 OESA-2021-1201 — hadoop security update 2026-10-03T13:31:19.017153+00:00

Affected: openEuler:20.03-LTS-SP1: hadoop

Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fix(es): In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.(CVE-2020-9492)

 https://cve.radiocsirt.org/vuln/rhsa-2022:5606 RHSA-2022:5606 — Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.7 security update 2026-10-03T13:31:19.017173+00:00

hadoop: WebHDFS client might send SPNEGO authorization header lz4: memory corruption due to an integer overflow bug caused by memmove argument elasticsearch: executing async search improperly stores HTTP headers leading to information disclosure elasticsearch: Document disclosure flaw in the Elasticsearch suggester elasticsearch: Document disclosure flaw when Document or Field Level Security is used jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xstream: Injecting highly recursive collections or maps can cause a DoS quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-03T13:31:19.017203+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.