https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T05:28:05.275854+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01357 bdu:2025-01357 2026-10-10T05:28:05.280176+00:00 bdu:2025-01357 https://cve.radiocsirt.org/vuln/euvd-2026-260514 EUVD-2026-260514 2026-10-10T05:28:05.280221+00:00 EUVD-2026-260514 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0736 fkie_cve-2025-0736 2026-10-10T05:28:05.280237+00:00

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.

 https://cve.radiocsirt.org/vuln/ghsa-269m-c36j-r834 GHSA-269m-c36j-r834 — Infinispan vulnerable to Insertion of Sensitive Information into Log File 2026-10-10T05:28:05.280270+00:00

Affected: Maven: org.infinispan:infinispan-parent

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.

 https://cve.radiocsirt.org/vuln/rhsa-2025:2663 RHSA-2025:2663 — Red Hat Security Advisory: Red Hat Data Grid 8.5.3 security update 2026-10-10T05:28:05.280294+00:00

org.infinispan-infinispan-parent: Exposure of Sensitive Information in Application Logs io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0463 WID-SEC-W-2025-0463 — Keycloak (XStream und Infinispan): Multiple Vulnerabilities 2026-10-10T05:28:05.280316+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen preiszugeben.