https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:20:45.396610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03596 bdu:2022-03596 2026-10-03T13:20:45.438812+00:00 bdu:2022-03596 https://cve.radiocsirt.org/vuln/bit-minio-2021-43858 BIT-minio-2021-43858 — User privilege escalation in MinIO 2026-10-03T13:20:45.438850+00:00

Affected: Bitnami: minio

MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `RELEASE.2021-12-27T07-23-18Z` changes the accepted request body type and removes the ability to apply policy changes through this API. There is a workaround for this vulnerability: Changing passwords can be disabled by adding an explicit `Deny` rule to disable the API for users.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-097 certfr-2022-avi-097 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect Plus. Certaines d'entre elles permettent à un… 2026-10-03T13:20:45.438886+00:00 certfr-2022-avi-097 https://cve.radiocsirt.org/vuln/cnvd-2022-08921 cnvd-2022-08921 2026-10-03T13:20:45.438903+00:00 cnvd-2022-08921 https://cve.radiocsirt.org/vuln/euvd-2026-32758 EUVD-2026-32758 2026-10-03T13:20:45.438916+00:00 EUVD-2026-32758 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43858 fkie_cve-2021-43858 2026-10-03T13:20:45.438926+00:00

MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `RELEASE.2021-12-27T07-23-18Z` changes the accepted request body type and removes the ability to apply policy changes through this API. There is a workaround for this vulnerability: Changing passwords can be disabled by adding an explicit `Deny` rule to disable the API for users.

 https://cve.radiocsirt.org/vuln/gsd-2021-43858 gsd-2021-43858 2026-10-03T13:20:45.438949+00:00 gsd-2021-43858 https://cve.radiocsirt.org/vuln/rhsa-2022:0735 RHSA-2022:0735 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.2 security updates and bug fixes 2026-10-03T13:20:45.438959+00:00

nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes nodejs-json-schema: Prototype pollution vulnerability fastify-static: open redirect via an URL with double slash followed by a domain moby: `docker cp` allows unexpected chmod of host file moby: data directory contains subdirectories with insufficiently restricted permissions, which could lead to directory traversal golang.org/x/crypto: empty plaintext packet causes panic containerd: Unprivileged pod may bind mount any privileged regular file on disk minio: user privilege escalation in AddUser() admin API node-fetch: exposure of sensitive information to an unauthorized actor nats-server: misusing the "dynamically provisioned sandbox accounts" feature authenticated user can obtain the privileges of the System account

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1524 WID-SEC-W-2023-1524 — IBM Spectrum Protect Plus: Mehrere Schwachstellen 2026-10-03T13:20:45.438991+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect Plus ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, seine Privilegien zu erweitern, Sicherheitsmaßnahmen zu umgehen und beliebigen Code auszuführen.