https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:48:40.241744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21585 EUVD-2026-21585 2026-10-05T09:48:40.397846+00:00 EUVD-2026-21585 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20250 fkie_cve-2021-20250 2026-10-05T09:48:40.397889+00:00

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-2259-h742-5vr4 GHSA-2259-h742-5vr4 — JBoss EJB Client information disclosure vulnerability 2026-10-05T09:48:40.397922+00:00

Affected: Maven: org.jboss:jboss-ejb-client

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2021-20250 gsd-2021-20250 2026-10-05T09:48:40.397947+00:00 gsd-2021-20250 https://cve.radiocsirt.org/vuln/rhsa-2021:0872 RHSA-2021:0872 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update 2026-10-05T09:48:40.397958+00:00

guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272 WID-SEC-W-2023-1272 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-05T09:48:40.397986+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.