https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:40:58.477405+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-626 certfr-2022-avi-626 — De multiples vulnérabilités ont été découvertes dans IBM i Modernization. Certaines d'entre elles permettent à un attaq… 2026-10-03T11:40:58.559863+00:00 certfr-2022-avi-626 https://cve.radiocsirt.org/vuln/euvd-2026-11753 EUVD-2026-11753 2026-10-03T11:40:58.559904+00:00 EUVD-2026-11753 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1466 fkie_cve-2022-1466 2026-10-03T11:40:58.559920+00:00

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.

 https://cve.radiocsirt.org/vuln/ghsa-f32v-vf79-p29q GHSA-f32v-vf79-p29q — Improper authorization in Keycloak 2026-10-03T11:40:58.559948+00:00

Affected: Maven: org.keycloak:keycloak-core

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.

 https://cve.radiocsirt.org/vuln/gsd-2022-1466 gsd-2022-1466 2026-10-03T11:40:58.559971+00:00 gsd-2022-1466 https://cve.radiocsirt.org/vuln/rhsa-2022:0449 RHSA-2022:0449 — Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update 2026-10-03T11:40:58.559983+00:00

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender keycloak: Improper authorization for master realm log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen 2026-10-03T11:40:58.560009+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.