https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:33:43.172453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351116 EUVD-2026-351116 2026-10-02T22:33:43.473204+00:00 EUVD-2026-351116 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6508 fkie_cve-2024-6508 2026-10-02T22:33:43.473265+00:00

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s current application account using a third-party account without any restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-4crf-28c7-v4gr GHSA-4crf-28c7-v4gr — Openshift Console insufficient entropy vulnerability 2026-10-02T22:33:43.473307+00:00

Affected: Go: github.com/openshift/console

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s current application account using a third-party account without any restrictions.

 https://cve.radiocsirt.org/vuln/rhsa-2024:10813 RHSA-2024:10813 — Red Hat Security Advisory: OpenShift Container Platform 4.13.54 bug fix and security update 2026-10-02T22:33:43.473338+00:00

golang-github-gin-gonic-gin: Improper Input Validation golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) openshift-console: OAuth2 insufficient state parameter entropy QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1892 WID-SEC-W-2024-1892 — Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T22:33:43.473364+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen.