https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:48:01.664773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-241795 EUVD-2026-241795 2026-10-09T20:48:01.668100+00:00 EUVD-2026-241795 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51982 fkie_cve-2023-51982 2026-10-09T20:48:01.668136+00:00

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI directly using the default user identity.(https://github.com/crate/crate/issues/15231)

 https://cve.radiocsirt.org/vuln/ghsa-7mgx-gvjw-m3w3 GHSA-7mgx-gvjw-m3w3 — CrateDB authentication bypass vulnerability 2026-10-09T20:48:01.668170+00:00

Affected: Maven: io.crate:crate

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI directly using the default user identity.

 https://cve.radiocsirt.org/vuln/gsd-2023-51982 gsd-2023-51982 2026-10-09T20:48:01.668197+00:00 gsd-2023-51982 https://cve.radiocsirt.org/vuln/pysec-2024-27 Withdrawn: PYSEC-2024-27 2026-10-09T20:48:01.668209+00:00

Withdrawn by the publisher.

Affected: PyPI: crate

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI directly using the default user identity.(https://github.com/crate/crate/issues/15231)