https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:37:17.997026+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374237 EUVD-2026-374237 2026-10-03T07:37:18.130341+00:00 EUVD-2026-374237 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4061 fkie_cve-2023-4061 2026-10-03T07:37:18.130386+00:00

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

 https://cve.radiocsirt.org/vuln/ghsa-26qx-4m49-6cfr GHSA-26qx-4m49-6cfr — wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability 2026-10-03T07:37:18.130421+00:00

Affected: Maven: org.wildfly.core:wildfly-controller

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

 https://cve.radiocsirt.org/vuln/gsd-2023-4061 gsd-2023-4061 2026-10-03T07:37:18.130447+00:00 gsd-2023-4061 https://cve.radiocsirt.org/vuln/rhsa-2023:5484 RHSA-2023:5484 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 7 2026-10-03T07:37:18.130460+00:00

nodejs-semver: Regular expression denial of service eap-7: heap exhaustion via deserialization wildfly-core: Management User RBAC permission allows unexpected reading of system-properties to an Unauthorized actor tough-cookie: prototype pollution in cookie memstore log4j1-socketappender: DoS via hashmap logging bouncycastle: potential blind LDAP injection attack using a self-signed certificate netty: SniHandler 16MB allocation leads to OOM