https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:52:15.267313+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-270690 EUVD-2026-270690 2026-10-03T11:52:15.273389+00:00 EUVD-2026-270690 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4886 fkie_cve-2023-4886 2026-10-03T11:52:15.273437+00:00

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

 https://cve.radiocsirt.org/vuln/ghsa-r2mj-49jv-4jq7 GHSA-r2mj-49jv-4jq7 2026-10-03T11:52:15.273493+00:00

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

 https://cve.radiocsirt.org/vuln/gsd-2023-4886 gsd-2023-4886 2026-10-03T11:52:15.273529+00:00 gsd-2023-4886 https://cve.radiocsirt.org/vuln/rhsa-2023:7851 RHSA-2023:7851 — Red Hat Security Advisory: Satellite 6.14.1 Async Security Update 2026-10-03T11:52:15.273549+00:00

foreman: World readable file containing secrets actionpack: Possible XSS via User Supplied Values to redirect_to GitPython: Blind local file inclusion python-urllib3: Cookie request header isn't stripped during cross-origin redirects urllib3: Request body not stripped after redirect from 303 status changes request method to GET