https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:04:41.004059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08649 bdu:2023-08649 2026-10-03T05:04:41.426102+00:00 bdu:2023-08649 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0314 certfr-2023-avi-0314 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Scale. Elles permettent à un attaquant de provoquer u… 2026-10-03T05:04:41.426178+00:00 certfr-2023-avi-0314 https://cve.radiocsirt.org/vuln/cnvd-2022-79656 cnvd-2022-79656 2026-10-03T05:04:41.426200+00:00 cnvd-2022-79656 https://cve.radiocsirt.org/vuln/euvd-2026-308192 EUVD-2026-308192 2026-10-03T05:04:41.426214+00:00 EUVD-2026-308192 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45047 fkie_cve-2022-45047 2026-10-03T05:04:41.426226+00:00

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.

 https://cve.radiocsirt.org/vuln/ghsa-fhw8-8j55-vwgq GHSA-fhw8-8j55-vwgq — Unsafe deserialization in Apache MINA SSHD 2026-10-03T05:04:41.426258+00:00

Affected: Maven: org.apache.sshd:sshd-common, Maven: org.apache.sshd:sshd-core

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.

Until version 2.1.0, the code affected by this vulnerability appeared in `org.apache.sshd:sshd-core`. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package `org.apache.sshd:sshd-common`, which did not exist until version 2.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2022-45047 gsd-2022-45047 2026-10-03T05:04:41.426291+00:00 gsd-2022-45047 https://cve.radiocsirt.org/vuln/ncsc-2026-0028 NCSC-2026-0028 — Kwetsbaarheden verholpen in Oracle Analytics 2026-10-03T05:04:41.426303+00:00 NCSC-2026-0028 https://cve.radiocsirt.org/vuln/oesa-2022-2119 OESA-2022-2119 — apache-sshd security update 2026-10-03T05:04:41.426331+00:00

Affected: openEuler:20.03-LTS-SP1: apache-sshd, openEuler:20.03-LTS-SP3: apache-sshd, openEuler:22.03-LTS: apache-sshd

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fix(es): Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.(CVE-2022-45047)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12511-1 openSUSE-SU-2024:12511-1 — apache-sshd-2.9.2-1.1 on GA media 2026-10-03T05:04:41.426359+00:00

apache-sshd-2.9.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:8957 RHSA-2022:8957 — Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update 2026-10-03T05:04:41.426375+00:00

quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus mina-sshd: Java unsafe deserialization vulnerability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2302 WID-SEC-W-2022-2302 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T05:04:41.426394+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.