https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:30:26.931294+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04584 bdu:2021-04584 2026-10-05T22:30:26.936719+00:00 bdu:2021-04584 https://cve.radiocsirt.org/vuln/euvd-2026-28195 EUVD-2026-28195 2026-10-05T22:30:26.936750+00:00 EUVD-2026-28195 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32919 fkie_cve-2021-32919 2026-10-05T22:30:26.936764+00:00

An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server (when this option is enabled).

 https://cve.radiocsirt.org/vuln/ghsa-c9xv-56cc-gjw2 GHSA-c9xv-56cc-gjw2 2026-10-05T22:30:26.936793+00:00

An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server (when this option is enabled).

 https://cve.radiocsirt.org/vuln/gsd-2021-32919 gsd-2021-32919 2026-10-05T22:30:26.936818+00:00 gsd-2021-32919 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0728-1 openSUSE-SU-2021:0728-1 — Security update for prosody 2026-10-05T22:30:26.936840+00:00

Security update for prosody

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32919 UBUNTU-CVE-2021-32919 2026-10-05T22:30:26.936859+00:00

Affected: Ubuntu:16.04:LTS: prosody, Ubuntu:Pro:18.04:LTS: prosody, Ubuntu:20.04:LTS: prosody, Ubuntu:22.04:LTS: prosody

An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server (when this option is enabled).