https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:40:40.367341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159647 EUVD-2026-159647 2026-10-03T19:40:40.429002+00:00 EUVD-2026-159647 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3046 fkie_cve-2024-3046 2026-10-03T19:40:40.429039+00:00

In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.

This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1]

 https://cve.radiocsirt.org/vuln/ghsa-frc2-w2cc-x794 GHSA-frc2-w2cc-x794 — Eclipse Kura LogServlet vulnerability 2026-10-03T19:40:40.429076+00:00

Affected: Maven: org.eclipse.kura:org.eclipse.kura.web2

In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.

This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1].

 https://cve.radiocsirt.org/vuln/gsd-2024-3046 gsd-2024-3046 2026-10-03T19:40:40.429102+00:00 gsd-2024-3046