https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:38:51.745339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7334 EUVD-2026-7334 2026-10-02T18:38:51.811196+00:00 EUVD-2026-7334 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4503 fkie_cve-2023-4503 2026-10-02T18:38:51.811271+00:00

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

 https://cve.radiocsirt.org/vuln/ghsa-6c6r-r3r9-h62j GHSA-6c6r-r3r9-h62j 2026-10-02T18:38:51.811307+00:00

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

 https://cve.radiocsirt.org/vuln/gsd-2023-4503 gsd-2023-4503 2026-10-02T18:38:51.811324+00:00 gsd-2023-4503 https://cve.radiocsirt.org/vuln/rhsa-2023:7637 RHSA-2023:7637 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update 2026-10-02T18:38:51.811335+00:00

guava: insecure temporary directory creation eap-galleon: custom provisioning creates unsecured http-invoker xnio: StackOverflowException when the chain of notifier states becomes problematically big jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies apache-mina-sshd: information exposure in SFTP server implementations apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1286 WID-SEC-W-2024-1286 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-02T18:38:51.811368+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.