https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:48:04.180538+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:0288 ALSA-2025:0288 — Moderate: Bug fix of NetworkManager 2026-10-03T08:48:04.363594+00:00

Affected: AlmaLinux:8: NetworkManager, AlmaLinux:8: NetworkManager-adsl, AlmaLinux:8: NetworkManager-bluetooth, AlmaLinux:8: NetworkManager-cloud-setup, AlmaLinux:8: NetworkManager-config-connectivity-redhat, AlmaLinux:8: NetworkManager-config-server, AlmaLinux:8: NetworkManager-dispatcher-routing-rules, AlmaLinux:8: NetworkManager-initscripts-updown, AlmaLinux:8: NetworkManager-libnm, AlmaLinux:8: NetworkManager-libnm-devel and 6 more

Security and Bug Fix(es):

* NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661) * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051) * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)

 https://cve.radiocsirt.org/vuln/bdu:2024-03571 bdu:2024-03571 2026-10-03T08:48:04.363672+00:00 bdu:2024-03571 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0414 certfr-2024-avi-0414 — Une vulnérabilité a été découverte dans <span class="textit">les produits Palo Alto Networks</span>. Elle permet à un a… 2026-10-03T08:48:04.363690+00:00 certfr-2024-avi-0414 https://cve.radiocsirt.org/vuln/euvd-2026-160452 EUVD-2026-160452 2026-10-03T08:48:04.363705+00:00 EUVD-2026-160452 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3661 fkie_cve-2024-3661 2026-10-03T08:48:04.363716+00:00

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

 https://cve.radiocsirt.org/vuln/ghsa-jcv7-6v4q-4m7x GHSA-jcv7-6v4q-4m7x 2026-10-03T08:48:04.363740+00:00

By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks.

 https://cve.radiocsirt.org/vuln/gsd-2024-3661 gsd-2024-3661 2026-10-03T08:48:04.363756+00:00 gsd-2024-3661 https://cve.radiocsirt.org/vuln/rhsa-2025:0288 RHSA-2025:0288 — Red Hat Security Advisory: Bug fix of NetworkManager 2026-10-03T08:48:04.363767+00:00

DHCP: DHCP routing options can manipulate interface-based VPN traffic

 https://cve.radiocsirt.org/vuln/rhsa-2025:16411 RHSA-2025:16411 — Red Hat Security Advisory: NetworkManager security update 2026-10-03T08:48:04.363784+00:00

DHCP: DHCP routing options can manipulate interface-based VPN traffic

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3661 UBUNTU-CVE-2024-3661 2026-10-03T08:48:04.363799+00:00

Affected: Ubuntu:Pro:14.04:LTS: openvpn, Ubuntu:14.04:LTS: pptpd, Ubuntu:16.04:LTS: network-manager-pptp, Ubuntu:Pro:16.04:LTS: openvpn, Ubuntu:16.04:LTS: pptp-linux, Ubuntu:16.04:LTS: pptpd, Ubuntu:Pro:16.04:LTS: connman, Ubuntu:16.04:LTS: gadmin-openvpn-client, Ubuntu:16.04:LTS: gadmin-openvpn-server, Ubuntu:16.04:LTS: kvpnc and 108 more

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1047 WID-SEC-W-2024-1047 — VPN Clients / DHCP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T08:48:04.363995+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in VPN-Clients ausnutzen, die auf DHCP konfigurierten Systemen laufen, um den Datenverkehr umzuleiten.