https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:16:06.829800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06181 bdu:2025-06181 2026-10-03T11:16:07.038003+00:00 bdu:2025-06181 https://cve.radiocsirt.org/vuln/bit-vault-2023-0665 BIT-vault-2023-0665 — Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata 2026-10-03T11:16:07.038043+00:00

Affected: Bitnami: vault

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

 https://cve.radiocsirt.org/vuln/euvd-2026-216134 EUVD-2026-216134 2026-10-03T11:16:07.038080+00:00 EUVD-2026-216134 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0665 fkie_cve-2023-0665 2026-10-03T11:16:07.038094+00:00

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

 https://cve.radiocsirt.org/vuln/ghsa-hwc3-3qh6-r4gg GHSA-hwc3-3qh6-r4gg — HashiCorp Vault's PKI mount vulnerable to denial of service 2026-10-03T11:16:07.038116+00:00

Affected: Go: github.com/hashicorp/vault

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

 https://cve.radiocsirt.org/vuln/gsd-2023-0665 gsd-2023-0665 2026-10-03T11:16:07.038140+00:00 gsd-2023-0665 https://cve.radiocsirt.org/vuln/rhsa-2023:1326 RHSA-2023:1326 — Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update 2026-10-03T11:16:07.038152+00:00

go-yaml: Denial of Service in go-yaml goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be mongo-go-driver: specific cstrings input may not be properly validated golang: out-of-bounds read in golang.org/x/text/language leads to DoS prometheus/client_golang: Denial of service using InstrumentHandlerCounter helm: Denial of service through through repository index file helm: Denial of service through schema file golang: crash in a golang.org/x/crypto/ssh server vault: insufficient certificate revocation list checking golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests x/net/http2/h2c: request smuggling golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption exporter-toolkit: authentication bypass via cache poisoning vault: Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File hashicorp/vault: Vault’s PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata hashicorp/vault: Cache-Timing Attacks During Seal and Unseal Operations helm: getHostByName Function Information Disclosure containerd: Supplementary groups are not set up properly runc: Rootless runc makes `/sys/fs/cgroup` writable runc: volume mount race condition (regression of CVE-2019-19921) runc: AppArmor can be bypassed when `/pro…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0795 WID-SEC-W-2023-0795 — Hashicorp Vault: Mehrere Schwachstellen 2026-10-03T11:16:07.038216+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder die Kryptographie zu umgehen.