https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:22:37.575620+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01628 bdu:2022-01628 2026-10-03T02:22:37.598423+00:00 bdu:2022-01628 https://cve.radiocsirt.org/vuln/certfr-2022-avi-287 certfr-2022-avi-287 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T02:22:37.598461+00:00 certfr-2022-avi-287 https://cve.radiocsirt.org/vuln/cisco-sa-java-spring-scf-rce-dqrhhjxh cisco-sa-java-spring-scf-rce-DQrHhJxH — Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 2026-10-03T02:22:37.598481+00:00

On March 29, 2022, the following critical vulnerability in the Spring Cloud Function Framework affecting releases 3.1.6, 3.2.2, and older unsupported releases was disclosed: CVE-2022-22963: Remote code execution in Spring Cloud Function by malicious Spring Expression For a description of this vulnerability, see VMware Spring Framework Security Vulnerability Report ["https://tanzu.vmware.com/security/cve-2022-22963"]. Cisco's Response to This Vulnerability Cisco accessed all products for impact from CVE-2022-22963. To help detect exploitation of this vulnerability, Cisco has released Snort rules at the following location: Talos Rule SID 59388 ["https://www.snort.org/rule_docs/1-59388"] This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH"]

 https://cve.radiocsirt.org/vuln/euvd-2026-255854 EUVD-2026-255854 2026-10-03T02:22:37.598518+00:00 EUVD-2026-255854 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22963 fkie_cve-2022-22963 2026-10-03T02:22:37.598530+00:00

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

 https://cve.radiocsirt.org/vuln/ghsa-6v73-fgf6-w5j7 GHSA-6v73-fgf6-w5j7 — Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression 2026-10-03T02:22:37.598552+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-function-context

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

 https://cve.radiocsirt.org/vuln/gsd-2022-22963 gsd-2022-22963 2026-10-03T02:22:37.598576+00:00 gsd-2022-22963 https://cve.radiocsirt.org/vuln/rhsa-2022:1291 RHSA-2022:1291 — Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.21.1 2026-10-03T02:22:37.598587+00:00

spring-cloud-function: Remote code execution by malicious Spring Expression

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T02:22:37.598603+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.