https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:48:56.313946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2022-29226 BIT-envoy-2022-29226 — Trivial authentication bypass in Envoy 2026-10-04T12:48:56.319755+00:00

Affected: Bitnami: envoy

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access tokens, so by design when the HMAC signed cookie is missing a full authentication flow should be triggered. However, the current implementation assumes that access tokens are always validated thus allowing access in the presence of any access token attached to the request. Users are advised to upgrade. There is no known workaround for this issue.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 certfr-2022-avi-543 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-04T12:48:56.319806+00:00 certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/cnvd-2022-82666 cnvd-2022-82666 2026-10-04T12:48:56.319827+00:00 cnvd-2022-82666 https://cve.radiocsirt.org/vuln/euvd-2026-234061 EUVD-2026-234061 2026-10-04T12:48:56.319842+00:00 EUVD-2026-234061 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29226 fkie_cve-2022-29226 2026-10-04T12:48:56.319853+00:00

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access tokens, so by design when the HMAC signed cookie is missing a full authentication flow should be triggered. However, the current implementation assumes that access tokens are always validated thus allowing access in the presence of any access token attached to the request. Users are advised to upgrade. There is no known workaround for this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-29226 gsd-2022-29226 2026-10-04T12:48:56.319876+00:00 gsd-2022-29226 https://cve.radiocsirt.org/vuln/rhsa-2022:5004 RHSA-2022:5004 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.3 security update 2026-10-04T12:48:56.319887+00:00

golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed envoy: oauth filter allows trivial bypass envoy: oauth filter calls continueDecoding() from within decodeHeaders() Istio: Unsafe memory access in metadata exchange.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288 WID-SEC-W-2022-0288 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-04T12:48:56.319912+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.