https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:24:08.487863+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05628 bdu:2024-05628 2026-10-04T01:24:08.579939+00:00 bdu:2024-05628 https://cve.radiocsirt.org/vuln/cnvd-2024-33811 cnvd-2024-33811 2026-10-04T01:24:08.579980+00:00 cnvd-2024-33811 https://cve.radiocsirt.org/vuln/euvd-2026-163234 EUVD-2026-163234 2026-10-04T01:24:08.579995+00:00 EUVD-2026-163234 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41172 fkie_cve-2024-41172 2026-10-04T01:24:08.580007+00:00

In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run out of memory

 https://cve.radiocsirt.org/vuln/ghsa-4mgg-fqfq-64hg GHSA-4mgg-fqfq-64hg — Apache CXF allows unrestricted memory consumption in CXF HTTP clients 2026-10-04T01:24:08.580036+00:00

Affected: Maven: org.apache.cxf:cxf-rt-transports-http

In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run out of memory

 https://cve.radiocsirt.org/vuln/rhsa-2024:7052 RHSA-2024:7052 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA) 2026-10-04T01:24:08.580060+00:00

io.vertx:vertx-grpc-client: io.vertx:vertx-grpc-server: Vertx gRPC server does not limit the maximum message size apache: cxf: org.apache.cxf:cxf-rt-rs-security-jose: Denial of Service vulnerability in JOSE azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients org.hl7.fhir.core: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r4b: org.hl7.fhir.r5: org.hl7.fhir.utilities: XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1678 WID-SEC-W-2024-1678 — Apache CXF: Mehrere Schwachstellen 2026-10-04T01:24:08.580087+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.