https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:03:11.041928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07771 bdu:2024-07771 2026-10-03T22:03:11.081148+00:00 bdu:2024-07771 https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2024-39689 BREW-azure-cli-CVE-2024-39689 — Certifi removes GLOBALTRUST root certificate 2026-10-03T22:03:11.081193+00:00

Affected: Homebrew: azure-cli

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found [here]( https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI).

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0750 certfr-2024-avi-0750 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T22:03:11.081232+00:00 certfr-2024-avi-0750 https://cve.radiocsirt.org/vuln/euvd-2026-217784 EUVD-2026-217784 2026-10-03T22:03:11.081250+00:00 EUVD-2026-217784 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39689 fkie_cve-2024-39689 2026-10-03T22:03:11.081261+00:00

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

 https://cve.radiocsirt.org/vuln/ghsa-248v-346w-9cwc GHSA-248v-346w-9cwc — Certifi removes GLOBALTRUST root certificate 2026-10-03T22:03:11.081286+00:00

Affected: PyPI: certifi

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found [here]( https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI).

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-39689 msrc_CVE-2024-39689 — Certifi removes GLOBALTRUST root certificate 2026-10-03T22:03:11.081310+00:00 msrc_CVE-2024-39689 https://cve.radiocsirt.org/vuln/oesa-2026-2145 OESA-2026-2145 — ca-certificates security update 2026-10-03T22:03:11.081326+00:00

Affected: openEuler:20.03-LTS-SP4: ca-certificates, openEuler:22.03-LTS-SP4: ca-certificates, openEuler:24.03-LTS: ca-certificates, openEuler:24.03-LTS-SP1: ca-certificates, openEuler:24.03-LTS-SP3: ca-certificates

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI. Security Fix(es):

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.07.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla s trust store. `GLOBALTRUST` s root certificates are being removed pursuant to an investigation which identified long-running and unresolved compliance issues.(CVE-2024-39689)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14118-1 openSUSE-SU-2024:14118-1 — python310-certifi-2024.7.4-1.1 on GA media 2026-10-03T22:03:11.081356+00:00

python310-certifi-2024.7.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2024-230 PYSEC-2024-230 2026-10-03T22:03:11.081374+00:00

Affected: PyPI: certifi

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.07.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39689 Withdrawn: UBUNTU-CVE-2024-39689 2026-10-03T22:03:11.081404+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:Pro:16.04:LTS: python-certifi, Ubuntu:Pro:16.04:LTS: python-pip, Ubuntu:Pro:18.04:LTS: python-certifi, Ubuntu:Pro:18.04:LTS: python-pip, Ubuntu:Pro:20.04:LTS: python-certifi, Ubuntu:Pro:20.04:LTS: python-pip, Ubuntu:22.04:LTS: python-certifi, Ubuntu:22.04:LTS: python-pip, Ubuntu:24.04:LTS: python-certifi and 1 more

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1802 WID-SEC-W-2024-1802 — IBM Business Automation Workflow: Mehrere Schwachstellen 2026-10-03T22:03:11.081444+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen oder beliebigen Code auszuführen.