https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:35:26.961491+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-198897 EUVD-2026-198897 2026-10-03T13:35:27.048917+00:00 EUVD-2026-198897 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8037 fkie_cve-2024-8037 2026-10-03T13:35:27.048956+00:00

Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform actions that are normally reserved to a juju charm.

 https://cve.radiocsirt.org/vuln/ghsa-8v4w-f4r9-7h6x GHSA-8v4w-f4r9-7h6x — Vulnerable juju hook tool abstract UNIX domain socket 2026-10-03T13:35:27.048989+00:00

Affected: Go: github.com/juju/juju

### Impact When combined with an attack of `JUJU_CONTEXT_ID`, any user on the local system with access to the default network namespace may connect to the `@/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket` and perform actions that are normally reserved to a juju charm.

### Patches Patch: https://github.com/juju/juju/commit/2f2ec128ef5a8ca81fc86ae79cfcdbab0007c206 Patched in: - 3.5.4 - 3.4.6 - 3.3.7 - 3.1.10 - 2.9.51

### Workarounds No workarounds available.

### References [GHSA-mh98-763h-m9v4](https://github.com/juju/juju/security/advisories/GHSA-mh98-763h-m9v4) https://github.com/juju/juju/blob/725800953aaa29dbeda4f806097bf838e61644dd/worker/uniter/paths.go#L222

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 openSUSE-SU-2024:0350-1 — Security update for govulncheck-vulndb 2026-10-03T13:35:27.049019+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 SUSE-SU-2024:3911-1 — Security update for govulncheck-vulndb 2026-10-03T13:35:27.049062+00:00

Security update for govulncheck-vulndb