https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:49:54.202365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2022-23491 BREW-azure-cli-CVE-2022-23491 — Certifi removing TrustCor root certificate 2026-10-03T01:49:54.544413+00:00

Affected: Homebrew: azure-cli

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store.

TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found [here](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ).

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0086 certfr-2023-avi-0086 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T01:49:54.544498+00:00 certfr-2023-avi-0086 https://cve.radiocsirt.org/vuln/euvd-2026-233357 EUVD-2026-233357 2026-10-03T01:49:54.544521+00:00 EUVD-2026-233357 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23491 fkie_cve-2022-23491 2026-10-03T01:49:54.544535+00:00

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

 https://cve.radiocsirt.org/vuln/ghsa-43fp-rhv2-5gv8 GHSA-43fp-rhv2-5gv8 — Certifi removing TrustCor root certificate 2026-10-03T01:49:54.544570+00:00

Affected: PyPI: certifi

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store.

TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found [here](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ).

 https://cve.radiocsirt.org/vuln/gsd-2022-23491 gsd-2022-23491 2026-10-03T01:49:54.544596+00:00 gsd-2022-23491 https://cve.radiocsirt.org/vuln/oesa-2023-1457 OESA-2023-1457 — python-certifi security update 2026-10-03T01:49:54.544609+00:00

Affected: openEuler:20.03-LTS-SP1: python-certifi, openEuler:20.03-LTS-SP3: python-certifi, openEuler:22.03-LTS: python-certifi, openEuler:22.03-LTS-SP1: python-certifi, openEuler:22.03-LTS-SP2: python-certifi

Certifi provides Mozilla carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project Security Fix(es): Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.(CVE-2022-23491) Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.(CVE-2023-37920)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13237-1 openSUSE-SU-2024:13237-1 — python310-certifi-2023.7.22-2.1 on GA media 2026-10-03T01:49:54.544661+00:00

python310-certifi-2023.7.22-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2022-42986 PYSEC-2022-42986 2026-10-03T01:49:54.544681+00:00

Affected: PyPI: certifi

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

 https://cve.radiocsirt.org/vuln/rhba-2023:0589 RHBA-2023:0589 — Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.3 Product Release Update 2026-10-03T01:49:54.544704+00:00

python-certifi: untrusted root certificates

 https://cve.radiocsirt.org/vuln/suse-su-2023:0118-1 SUSE-SU-2023:0118-1 — Security update for mozilla-nss 2026-10-03T01:49:54.544721+00:00

Security update for mozilla-nss

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23491 UBUNTU-CVE-2022-23491 2026-10-03T01:49:54.544737+00:00

Affected: Ubuntu:Pro:14.04:LTS: ca-certificates, Ubuntu:Pro:16.04:LTS: ca-certificates, Ubuntu:18.04:LTS: ca-certificates, Ubuntu:20.04:LTS: ca-certificates, Ubuntu:22.04:LTS: ca-certificates

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0255 WID-SEC-W-2023-0255 — IBM Spectrum Protect: Mehrere Schwachstellen 2026-10-03T01:49:54.544764+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und einen Denial of Service zu verursachen.