https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:20:39.871470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260311 EUVD-2026-260311 2026-10-03T01:20:39.875508+00:00 EUVD-2026-260311 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3628 fkie_cve-2023-3628 2026-10-03T01:20:39.875539+00:00

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

 https://cve.radiocsirt.org/vuln/ghsa-fhr7-8jx4-r9cp GHSA-fhr7-8jx4-r9cp — Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions 2026-10-03T01:20:39.875571+00:00

Affected: Maven: org.infinispan:infinispan-server-rest

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

 https://cve.radiocsirt.org/vuln/gsd-2023-3628 gsd-2023-3628 2026-10-03T01:20:39.875603+00:00 gsd-2023-3628 https://cve.radiocsirt.org/vuln/rhsa-2023:5396 RHSA-2023:5396 — Red Hat Security Advisory: Red Hat Data Grid 8.4.4 security update 2026-10-03T01:20:39.875616+00:00

mina-sshd: Java unsafe deserialization vulnerability infispan: REST bulk ops don't check permissions infinispan: Non-admins should not be able to get cache config via REST API infinispan: circular reference on marshalling leads to DoS netty: SniHandler 16MB allocation leads to OOM jackson-databind: denial of service via cylic dependencies apache-mina-sshd: information exposure in SFTP server implementations

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2518 WID-SEC-W-2023-2518 — Red Hat JBoss Data Grid: Mehre Schwachstellen 2026-10-03T01:20:39.875641+00:00

Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Data Grid ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.