https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:50:45.354317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03108 bdu:2024-03108 2026-10-02T23:50:45.530033+00:00 bdu:2024-03108 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0298 certfr-2024-avi-0298 — Une vulnérabilité a été découverte dans<span class="textit"> Spring Framework</span>. Elle permet à un attaquant de pro… 2026-10-02T23:50:45.530071+00:00 certfr-2024-avi-0298 https://cve.radiocsirt.org/vuln/euvd-2026-217192 EUVD-2026-217192 2026-10-02T23:50:45.530090+00:00 EUVD-2026-217192 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22262 fkie_cve-2024-22262 2026-10-02T23:50:45.530103+00:00

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.

This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259  and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.

 https://cve.radiocsirt.org/vuln/ghsa-2wrp-6fg6-hmc5 GHSA-2wrp-6fg6-hmc5 — Spring Framework URL Parsing with Host Validation 2026-10-02T23:50:45.530134+00:00

Affected: Maven: org.springframework:spring-web

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.

This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259  and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.

 https://cve.radiocsirt.org/vuln/gsd-2024-22262 gsd-2024-22262 2026-10-02T23:50:45.530162+00:00 gsd-2024-22262 https://cve.radiocsirt.org/vuln/icsa-25-261-04 ICSA-25-261-04 — Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product 2026-10-02T23:50:45.530173+00:00

Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

 https://cve.radiocsirt.org/vuln/rhsa-2024:3708 RHSA-2024:3708 — Red Hat Security Advisory: Red Hat Build of Apache Camel 3.20.6 for Spring Boot security update. 2026-10-02T23:50:45.530194+00:00

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data santuario: Private Key disclosure in debug-log output spring-security: Broken Access Control With Direct Use of AuthenticatedVoter springframework: URL Parsing with Host Validation cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-22262 UBUNTU-CVE-2024-22262 2026-10-02T23:50:45.530217+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks. This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259  and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0854 WID-SEC-W-2024-0854 — VMware Tanzu Spring Framework: Schwachstelle ermöglicht Manipulation von Daten 2026-10-02T23:50:45.530249+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Framework ausnutzen, um Daten zu manipulieren oder Informationen offenzulegen.