https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:14:30.652279+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03626 bdu:2026-03626 2026-10-02T14:14:30.839708+00:00 bdu:2026-03626 https://cve.radiocsirt.org/vuln/bell-cve-2025-11563 BELL-CVE-2025-11563 2026-10-02T14:14:30.839746+00:00

Affected: Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl

 https://cve.radiocsirt.org/vuln/euvd-2026-270697 EUVD-2026-270697 2026-10-02T14:14:30.839777+00:00 EUVD-2026-270697 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11563 fkie_cve-2025-11563 2026-10-02T14:14:30.839790+00:00

URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it.

This flaw only affects the wcurl command line tool.

 https://cve.radiocsirt.org/vuln/ghsa-6xq2-fm6w-mxfm GHSA-6xq2-fm6w-mxfm 2026-10-02T14:14:30.839813+00:00

URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it.

This flaw only affects the wcurl command line tool.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11563 msrc_CVE-2025-11563 — wcurl path traversal with percent-encoded slashes 2026-10-02T14:14:30.839829+00:00 msrc_CVE-2025-11563 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15757-1 openSUSE-SU-2025:15757-1 — curl-8.17.0-1.1 on GA media 2026-10-02T14:14:30.839845+00:00

curl-8.17.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:21077-1 SUSE-SU-2025:21077-1 — Security update for curl 2026-10-02T14:14:30.839860+00:00

Security update for curl

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11563 UBUNTU-CVE-2025-11563 2026-10-02T14:14:30.839874+00:00

Affected: Ubuntu:25.10: curl

URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it. This flaw only affects the wcurl command line tool.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2485 WID-SEC-W-2025-2485 — cURL (wcurl): Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T14:14:30.839892+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in cURL ausnutzen, um Dateien zu manipulieren.