https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:47:56.705151+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-minio-2022-24842 BIT-minio-2022-24842 — Improper Privilege Management in MinIO 2026-10-04T14:47:56.713246+00:00

Affected: Bitnami: minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. This in turn allows the user to escalate privilege to that of the root user. This vulnerability has been resolved in pull request #14729 and is included in `RELEASE.2022-04-12T06-55-35Z`. Users unable to upgrade may workaround this issue by explicitly adding a `admin:CreateServiceAccount` deny policy, however, this, in turn, denies the user the ability to create their own service accounts as well.

 https://cve.radiocsirt.org/vuln/cnvd-2022-55156 cnvd-2022-55156 2026-10-04T14:47:56.713296+00:00 cnvd-2022-55156 https://cve.radiocsirt.org/vuln/euvd-2026-232766 EUVD-2026-232766 2026-10-04T14:47:56.713314+00:00 EUVD-2026-232766 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24842 fkie_cve-2022-24842 2026-10-04T14:47:56.713326+00:00

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. This in turn allows the user to escalate privilege to that of the root user. This vulnerability has been resolved in pull request #14729 and is included in `RELEASE.2022-04-12T06-55-35Z`. Users unable to upgrade may workaround this issue by explicitly adding a `admin:CreateServiceAccount` deny policy, however, this, in turn, denies the user the ability to create their own service accounts as well.

 https://cve.radiocsirt.org/vuln/gsd-2022-24842 gsd-2022-24842 2026-10-04T14:47:56.713349+00:00 gsd-2022-24842 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0515 WID-SEC-W-2022-0515 — IBM Spectrum Protect: Mehrere Schwachstellen 2026-10-04T14:47:56.713359+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.