https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:11:12.108050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-04T16:11:12.119869+00:00 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/cnvd-2025-05699 cnvd-2025-05699 2026-10-04T16:11:12.119912+00:00 cnvd-2025-05699 https://cve.radiocsirt.org/vuln/euvd-2026-217854 EUVD-2026-217854 2026-10-04T16:11:12.119928+00:00 EUVD-2026-217854 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56180 fkie_cve-2024-56180 2026-10-04T16:11:12.119940+00:00

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian deserialization rpc protocol. Users can use the code under the master branch in project repo or version 1.11.0 to fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-ffvr-gmp3-xx43 GHSA-ffvr-gmp3-xx43 — Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution 2026-10-04T16:11:12.119971+00:00

Affected: Maven: org.apache.eventmesh:eventmesh-meta-raft

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian deserialization rpc protocol. Users can use the code under the master branch in project repo or version 1.11.0 to fix this issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-56180 UBUNTU-CVE-2024-56180 2026-10-04T16:11:12.119996+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 232 more

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian deserialization rpc protocol. Users can use the code under the master branch in project repo or version 1.11.0 to fix this issue.