https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:41:44.477231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-222144 EUVD-2026-222144 2026-10-03T02:41:44.766742+00:00 EUVD-2026-222144 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4492 fkie_cve-2022-4492 2026-10-03T02:41:44.766789+00:00

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

 https://cve.radiocsirt.org/vuln/ghsa-pfcc-3g6r-8rg8 GHSA-pfcc-3g6r-8rg8 — Undertow client not checking server identity presented by server certificate in https connections 2026-10-03T02:41:44.766824+00:00

Affected: Maven: io.undertow:undertow-core

The undertow client is not checking the server identity presented by the server certificate in https connections. This should be performed by default in https and in http/2.

 https://cve.radiocsirt.org/vuln/gsd-2022-4492 gsd-2022-4492 2026-10-03T02:41:44.766850+00:00 gsd-2022-4492 https://cve.radiocsirt.org/vuln/rhsa-2023:1512 RHSA-2023:1512 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 security update 2026-10-03T02:41:44.766864+00:00

SnakeYaml: Constructor Deserialization Remote Code Execution undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode hsqldb: Untrusted input may lead to RCE attack dev-java/snakeyaml: DoS via stack overflow codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider RESTEasy: creation of insecure temp files Undertow: Infinite loop in SslConduit during close

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4492 UBUNTU-CVE-2022-4492 2026-10-03T02:41:44.766895+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0749 WID-SEC-W-2023-0749 — NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-03T02:41:44.766948+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Dateien zu manipulieren.