https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:01:36.791005+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04736 bdu:2024-04736 2026-10-03T04:01:36.838428+00:00 bdu:2024-04736 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 certfr-2024-avi-0903 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:01:36.838474+00:00 certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/cnvd-2024-22231 cnvd-2024-22231 2026-10-03T04:01:36.838493+00:00 cnvd-2024-22231 https://cve.radiocsirt.org/vuln/euvd-2026-217368 EUVD-2026-217368 2026-10-03T04:01:36.838506+00:00 EUVD-2026-217368 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28752 fkie_cve-2024-28752 2026-10-03T04:01:36.838517+00:00

A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.

 https://cve.radiocsirt.org/vuln/ghsa-qmgx-j96g-4428 GHSA-qmgx-j96g-4428 — SSRF vulnerability using the Aegis DataBinding in Apache CXF 2026-10-03T04:01:36.838546+00:00

Affected: Maven: org.apache.cxf:cxf-rt-databinding-aegis

A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.

 https://cve.radiocsirt.org/vuln/gsd-2024-28752 gsd-2024-28752 2026-10-03T04:01:36.838571+00:00 gsd-2024-28752 https://cve.radiocsirt.org/vuln/rhsa-2024:10207 RHSA-2024:10207 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update 2026-10-03T04:01:36.838582+00:00

undertow: client side invocation timeout raised when calling over HTTP2 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender h2: Loading of custom classes from remote servers through JNDI log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) hsqldb: Untrusted input may lead to RCE attack CXF: SSRF Vulnerability eap-7: heap exhaustion via deserialization xnio: StackOverflowException when the chain of notifier states becomes problematically big log4j1-socketappender: DoS via hashmap logging apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding apache-avro: Schema parsing may trigger Remote Code Execution (RCE)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0642 WID-SEC-W-2024-0642 — Apache CXF: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T04:01:36.838623+00:00

Ein entfernter Angreifer kann eine Schwachstelle in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen.