https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T16:49:14.137477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09087 bdu:2024-09087 2026-10-18T16:49:14.141716+00:00 bdu:2024-09087 https://cve.radiocsirt.org/vuln/euvd-2026-198716 EUVD-2026-198716 2026-10-18T16:49:14.141751+00:00 EUVD-2026-198716 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43383 fkie_cve-2024-43383 2026-10-18T16:49:14.141766+00:00

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator.

This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016.

An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access.

Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-2qw8-ppr5-m96c GHSA-2qw8-ppr5-m96c — Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability 2026-10-18T16:49:14.141800+00:00

Affected: NuGet: Lucene.Net.Replicator

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator.

This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016.

An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access.

Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3313 WID-SEC-W-2024-3313 — Apache Lucene: Schwachstelle ermöglicht Codeausführung 2026-10-18T16:49:14.141827+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Lucene ausnutzen, um beliebigen Programmcode auszuführen.