https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:05:16.281064+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02529 bdu:2025-02529 2026-10-04T02:05:16.543176+00:00 bdu:2025-02529 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0214 certfr-2025-avi-0214 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T02:05:16.543237+00:00 certfr-2025-avi-0214 https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4 2026-10-04T02:05:16.543271+00:00

Withdrawn by the publisher.

Affected: CleanStart: stargate

Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...

 https://cve.radiocsirt.org/vuln/euvd-2026-218593 EUVD-2026-218593 2026-10-04T02:05:16.543305+00:00 EUVD-2026-218593 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25193 fkie_cve-2025-25193 2026-10-04T02:05:16.543319+00:00

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.

 https://cve.radiocsirt.org/vuln/ghsa-389x-839f-4rhx GHSA-389x-839f-4rhx — Denial of Service attack on windows app using Netty 2026-10-04T02:05:16.543345+00:00

Affected: Maven: io.netty:netty-common

### Summary An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash.

### Details A similar issue was previously reported in https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit.

### PoC The PoC is the same as for https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv with the detail that the file should only contain null-bytes; 0x00. When the null-bytes are encountered by the `InputStreamReader`, it will issue replacement characters in its charset decoding, which will fill up the line-buffer in the `BufferedReader.readLine()`, because the replacement character is not a line-break character.

### Impact Impact is the same as https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv

 https://cve.radiocsirt.org/vuln/jvndb-2026-020740 jvndb-2026-020740 2026-10-04T02:05:16.543414+00:00

Hitachi Infrastructure Analytics Advisor contains the following vulnerability: CVE-2025-48924 Hitachi Ops Center Analyzer contains the following vulnerabilities: CVE-2025-48924 Hitachi Ops Center Analyzer viewpoint contains the following vulnerability: CVE-2025-48924 Hitachi Ops Center Viewpoint contains the following vulnerabilities: CVE-2023-35116, CVE-2025-24970, CVE-2025-25193, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057

 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 NCSC-2026-0022 — Kwetsbaarheden verholpen in Oracle Communications producten 2026-10-04T02:05:16.543434+00:00 NCSC-2026-0022 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14765-1 openSUSE-SU-2025:14765-1 — netty-4.1.118-1.1 on GA media 2026-10-04T02:05:16.543501+00:00

netty-4.1.118-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:12511 RHSA-2025:12511 — Red Hat Security Advisory: Streams for Apache Kafka 3.0.0 release and security update 2026-10-04T02:05:16.543518+00:00

json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority jetty-server: Jetty: Gzip Request Body Buffer Corruption kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider netty: Denial of Service attack on windows app using Netty kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine netty: Denial of Service attack on windows app using Netty commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25193 UBUNTU-CVE-2025-25193 2026-10-04T02:05:16.543557+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:25.10: netty, Ubuntu:Pro:26.04:LTS: netty

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0638 WID-SEC-W-2025-0638 — IBM WebSphere Application Server Liberty: Schwachstelle ermöglicht Denial of Service 2026-10-04T02:05:16.543591+00:00

Ein lokaler Angreifer kann eine Schwachstelle in IBM WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen.