https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:23:59.888311+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00529 bdu:2026-00529 2026-10-05T17:23:59.892027+00:00 bdu:2026-00529 https://cve.radiocsirt.org/vuln/euvd-2026-215287 EUVD-2026-215287 2026-10-05T17:23:59.892062+00:00 EUVD-2026-215287 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23012 fkie_cve-2025-23012 2026-10-05T17:23:59.892077+00:00

Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).

 https://cve.radiocsirt.org/vuln/ghsa-rrq3-36q9-c259 GHSA-rrq3-36q9-c259 2026-10-05T17:23:59.892106+00:00

Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).

 https://cve.radiocsirt.org/vuln/va-25-021-01 VA-25-021-01 — Fedora Repository fedoraIntCallUser default credentials and insecure archive extraction 2026-10-05T17:23:59.892122+00:00

Fedora Repository 3.8.x allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticated GET request. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23). Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).