https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:13:07.999452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08077 bdu:2023-08077 2026-10-03T11:13:08.273015+00:00 bdu:2023-08077 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0249 certfr-2026-avi-0249 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T11:13:08.273078+00:00 certfr-2026-avi-0249 https://cve.radiocsirt.org/vuln/cleanstart-2026-ph67619 CLEANSTART-2026-PH67619 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA 2026-10-03T11:13:08.273099+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

 https://cve.radiocsirt.org/vuln/cnvd-2023-71726 cnvd-2023-71726 2026-10-03T11:13:08.273130+00:00 cnvd-2023-71726 https://cve.radiocsirt.org/vuln/euvd-2026-193668 EUVD-2026-193668 2026-10-03T11:13:08.273144+00:00 EUVD-2026-193668 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35887 fkie_cve-2023-35887 2026-10-03T11:13:08.273155+00:00

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

 https://cve.radiocsirt.org/vuln/ghsa-mjmq-gwgm-5qhm GHSA-mjmq-gwgm-5qhm — Apache MINA SSHD information disclosure vulnerability 2026-10-03T11:13:08.273182+00:00

Affected: Maven: org.apache.sshd:sshd-common, Maven: org.apache.sshd:sshd-sftp, Maven: org.apache.sshd:sshd-core

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.9.3 Users are recommended to upgrade to 2.9.3

Until version 2.1.0, some of the code affected by this vulnerability appeared in org.apache.sshd:sshd-core. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package org.apache.sshd:sshd-common, which did not exist until version 2.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2023-35887 gsd-2023-35887 2026-10-03T11:13:08.273214+00:00 gsd-2023-35887 https://cve.radiocsirt.org/vuln/oesa-2024-1079 OESA-2024-1079 — apache-sshd security update 2026-10-03T11:13:08.273226+00:00

Affected: openEuler:20.03-LTS-SP1: apache-sshd, openEuler:20.03-LTS-SP4: apache-sshd, openEuler:22.03-LTS: apache-sshd, openEuler:22.03-LTS-SP1: apache-sshd, openEuler:22.03-LTS-SP2: apache-sshd, openEuler:22.03-LTS-SP3: apache-sshd

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fix(es): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks. This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10 (CVE-2023-35887)

 https://cve.radiocsirt.org/vuln/rhsa-2023:5396 RHSA-2023:5396 — Red Hat Security Advisory: Red Hat Data Grid 8.4.4 security update 2026-10-03T11:13:08.273258+00:00

mina-sshd: Java unsafe deserialization vulnerability infispan: REST bulk ops don't check permissions infinispan: Non-admins should not be able to get cache config via REST API infinispan: circular reference on marshalling leads to DoS netty: SniHandler 16MB allocation leads to OOM jackson-databind: denial of service via cylic dependencies apache-mina-sshd: information exposure in SFTP server implementations

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2518 WID-SEC-W-2023-2518 — Red Hat JBoss Data Grid: Mehre Schwachstellen 2026-10-03T11:13:08.273292+00:00

Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Data Grid ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.