https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:08:20.718655+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07035 bdu:2024-07035 2026-10-04T03:08:20.790995+00:00 bdu:2024-07035 https://cve.radiocsirt.org/vuln/euvd-2026-159517 EUVD-2026-159517 2026-10-04T03:08:20.791036+00:00 EUVD-2026-159517 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6800 fkie_cve-2024-6800 2026-10-04T03:08:20.791058+00:00

An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation metadata XML. This vulnerability allowed an attacker with direct network access to GitHub Enterprise Server to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14, and 3.10.16. This vulnerability was reported via the GitHub Bug Bounty program.

 https://cve.radiocsirt.org/vuln/ghsa-5wm9-5344-qrrj GHSA-5wm9-5344-qrrj 2026-10-04T03:08:20.791109+00:00

An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when utilizing SAML authentication with specific identity providers. This vulnerability allowed an attacker with direct network access to GitHub Enterprise Server to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14, and 3.10.16. This vulnerability was reported via the GitHub Bug Bounty program.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1890 WID-SEC-W-2024-1890 — Microsoft GitHub Enterprise: Mehrere Schwachstellen 2026-10-04T03:08:20.791146+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, erweiterte Rechte zu erlangen und Daten zu ändern.