https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:04:23.191572+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03686 bdu:2021-03686 2026-10-03T08:04:23.463892+00:00 bdu:2021-03686 https://cve.radiocsirt.org/vuln/bit-tomcat-2021-30640 BIT-tomcat-2021-30640 — Auth weakness in JNDIRealm 2026-10-03T08:04:23.463932+00:00

Affected: Bitnami: tomcat

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0 to 10.0.5; 9.0.0 to 9.0.45; 8.5.0 to 8.5.65.

 https://cve.radiocsirt.org/vuln/euvd-2026-27017 EUVD-2026-27017 2026-10-03T08:04:23.463967+00:00 EUVD-2026-27017 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30640 fkie_cve-2021-30640 2026-10-03T08:04:23.463980+00:00

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.

 https://cve.radiocsirt.org/vuln/ghsa-36qh-35cm-5w2w GHSA-36qh-35cm-5w2w — Authentication Bypass by Alternate Name in Apache Tomcat 2026-10-03T08:04:23.464002+00:00

Affected: Maven: org.apache.tomcat:tomcat

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.

 https://cve.radiocsirt.org/vuln/gsd-2021-30640 gsd-2021-30640 2026-10-03T08:04:23.464026+00:00 gsd-2021-30640 https://cve.radiocsirt.org/vuln/oesa-2021-1299 OESA-2021-1299 — tomcat security update 2026-10-03T08:04:23.464038+00:00

Affected: openEuler:20.03-LTS-SP1: tomcat, openEuler:20.03-LTS-SP2: tomcat

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project Security Fix(es): A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.(CVE-2021-30640)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1490-1 openSUSE-SU-2021:1490-1 — Security update for tomcat 2026-10-03T08:04:23.464062+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2021:4861 RHSA-2021:4861 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release 2026-10-03T08:04:23.464081+00:00

openssl: Read buffer overruns processing ASN.1 strings openssl: integer overflow in CipherUpdate openssl: NULL pointer dereference in X509_issuer_and_serial_hash() tomcat: JNDI realm authentication weakness tomcat: HTTP request smuggling when used with a reverse proxy tomcat: OutOfMemoryError caused by HTTP upgrade connection leak could lead to DoS

 https://cve.radiocsirt.org/vuln/suse-su-2021:3602-1 SUSE-SU-2021:3602-1 — Security update for tomcat 2026-10-03T08:04:23.464106+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-30640 UBUNTU-CVE-2021-30640 2026-10-03T08:04:23.464121+00:00

Affected: Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:18.04:LTS: tomcat9, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:20.04:LTS: tomcat9

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 WID-SEC-W-2022-0607 — Red Hat FUSE: Mehrere Schwachstellen 2026-10-03T08:04:23.464149+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.