https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:09:48.134816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04199 bdu:2023-04199 2026-10-06T23:09:48.142199+00:00 bdu:2023-04199 https://cve.radiocsirt.org/vuln/bit-envoy-2023-35941 BIT-envoy-2023-35941 — Envoy vulnerable to OAuth2 credentials exploit with permanent validity 2026-10-06T23:09:48.142238+00:00

Affected: Bitnami: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malicious client is able to construct credentials with permanent validity in some specific scenarios. This is caused by the some rare scenarios in which HMAC payload can be always valid in OAuth2 filter's check. Versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 have a fix for this issue. As a workaround, avoid wildcards/prefix domain wildcards in the host's domain configuration.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0156 certfr-2024-avi-0156 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Tenable</span>. Certaines d'entr… 2026-10-06T23:09:48.142275+00:00 certfr-2024-avi-0156 https://cve.radiocsirt.org/vuln/euvd-2026-197372 EUVD-2026-197372 2026-10-06T23:09:48.142293+00:00 EUVD-2026-197372 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35941 fkie_cve-2023-35941 2026-10-06T23:09:48.142304+00:00

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malicious client is able to construct credentials with permanent validity in some specific scenarios. This is caused by the some rare scenarios in which HMAC payload can be always valid in OAuth2 filter's check. Versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 have a fix for this issue. As a workaround, avoid wildcards/prefix domain wildcards in the host's domain configuration.

 https://cve.radiocsirt.org/vuln/gsd-2023-35941 gsd-2023-35941 2026-10-06T23:09:48.142327+00:00 gsd-2023-35941 https://cve.radiocsirt.org/vuln/rhsa-2023:4624 RHSA-2023:4624 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.3.6 security update 2026-10-06T23:09:48.142338+00:00

envoy: OAuth2 credentials exploit with permanent validity envoy: gRPC access log crash caused by the listener draining envoy: CORS filter segfault when origin header is removed envoy: Incorrect handling of HTTP requests and responses with mixed case schemes envoy: HTTP/2 memory leak in nghttp2 codec

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2058 WID-SEC-W-2023-2058 — Red Hat OpenShift Service Mesh und Service Mesh Containers: Mehrere Schwachstellen 2026-10-06T23:09:48.142367+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh und Service Mesh Containers, sowie Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.