https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:40:00.550018+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01431 bdu:2024-01431 2026-10-04T06:40:00.637123+00:00 bdu:2024-01431 https://cve.radiocsirt.org/vuln/cnvd-2024-07610 cnvd-2024-07610 2026-10-04T06:40:00.637160+00:00 cnvd-2024-07610 https://cve.radiocsirt.org/vuln/euvd-2026-258423 EUVD-2026-258423 2026-10-04T06:40:00.637176+00:00 EUVD-2026-258423 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32327 fkie_cve-2023-32327 2026-10-04T06:40:00.637189+00:00

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783.

 https://cve.radiocsirt.org/vuln/ghsa-gg63-hgm5-v538 GHSA-gg63-hgm5-v538 2026-10-04T06:40:00.637220+00:00

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783.

 https://cve.radiocsirt.org/vuln/gsd-2023-32327 gsd-2023-32327 2026-10-04T06:40:00.637238+00:00 gsd-2023-32327 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0054 WID-SEC-W-2024-0054 — IBM Security Verify Access: Mehrere Schwachstellen 2026-10-04T06:40:00.637249+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.