https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:33:29.770825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-229144 EUVD-2026-229144 2026-10-03T02:33:29.777866+00:00 EUVD-2026-229144 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4147 fkie_cve-2022-4147 2026-10-03T02:33:29.777916+00:00

Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and have no ReadableStream object used in the request.

 https://cve.radiocsirt.org/vuln/ghsa-9895-g6x5-xwcp GHSA-9895-g6x5-xwcp — Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed 2026-10-03T02:33:29.777958+00:00

Affected: Maven: io.quarkus:quarkus-vertx-http

Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and have no ReadableStream object used in the request.

 https://cve.radiocsirt.org/vuln/gsd-2022-4147 gsd-2022-4147 2026-10-03T02:33:29.777993+00:00 gsd-2022-4147 https://cve.radiocsirt.org/vuln/rhsa-2022:8957 RHSA-2022:8957 — Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update 2026-10-03T02:33:29.778011+00:00

quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus mina-sshd: Java unsafe deserialization vulnerability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2302 WID-SEC-W-2022-2302 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T02:33:29.778040+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.