https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:20:07.570718+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-198571 EUVD-2026-198571 2026-10-03T05:20:07.656515+00:00 EUVD-2026-198571 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38286 fkie_cve-2023-38286 2026-10-03T05:20:07.656554+00:00

Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.

 https://cve.radiocsirt.org/vuln/ghsa-7gj7-224w-vpr3 GHSA-7gj7-224w-vpr3 — Spring-boot-admin sandbox bypass via crafted HTML 2026-10-03T05:20:07.656589+00:00

Affected: Maven: de.codecentric:spring-boot-admin-server

Thymeleaf through 3.1.1.RELEASE as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 allows for a sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.

Spring Boot Admin 3.1.2 and 2.7.16 contain mitigations for the issue. This bypass is achived via a library called Thymeleaf which has added counter measures for this sort of bypass in version `3.1.2.RELEASE` which has explicity forbidden static access to `org.springframework.util` in expressions. Thymeleaf itself should not be considered vulnerable.

 https://cve.radiocsirt.org/vuln/gsd-2023-38286 gsd-2023-38286 2026-10-03T05:20:07.656621+00:00 gsd-2023-38286 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3377 WID-SEC-W-2024-3377 — Dell PowerProtect Data Domain: Mehrere Schwachstellen 2026-10-03T05:20:07.656635+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen und um nicht näher beschriebene Auswirkungen zu erzielen.