https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:04:35.458511+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-355271 EUVD-2026-355271 2026-10-04T05:04:35.668784+00:00 EUVD-2026-355271 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10234 fkie_cve-2024-10234 2026-10-04T05:04:35.668824+00:00

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.

 https://cve.radiocsirt.org/vuln/ghsa-w22f-vwwp-37pr GHSA-w22f-vwwp-37pr 2026-10-04T05:04:35.668857+00:00

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.

 https://cve.radiocsirt.org/vuln/rhsa-2025:10924 RHSA-2025:10924 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update 2026-10-04T05:04:35.668874+00:00

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS) org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting hibernate-validator: Hibernate Validator Expression Language Injection commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3249 WID-SEC-W-2024-3249 — Red Hat JBoss Enterprise Application Platform (Wildfly): Schwachstelle ermöglicht Cross-Site Scripting 2026-10-04T05:04:35.668906+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform, Keycloak und WildFly Application Server ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.