https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:35:19.301726+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08559 bdu:2025-08559 2026-10-02T18:35:19.365819+00:00 bdu:2025-08559 https://cve.radiocsirt.org/vuln/bit-vault-2025-3879 BIT-vault-2025-3879 — Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login 2026-10-02T18:35:19.365855+00:00

Affected: Bitnami: vault

Vault Community, Vault Enterprise (“Vault”) Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the bound_locations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18.

 https://cve.radiocsirt.org/vuln/euvd-2026-236592 EUVD-2026-236592 2026-10-02T18:35:19.365893+00:00 EUVD-2026-236592 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3879 fkie_cve-2025-3879 2026-10-02T18:35:19.365908+00:00

Vault Community, Vault Enterprise (“Vault”) Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the bound_locations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18.

 https://cve.radiocsirt.org/vuln/ghsa-f9ch-h8j7-8jwg GHSA-f9ch-h8j7-8jwg — Hashicorp Vault Community vulnerable to Incorrect Authorization 2026-10-02T18:35:19.365932+00:00

Affected: Go: github.com/hashicorp/vault

Vault Community, Vault Enterprise (“Vault”) Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the bound_locations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15059-1 openSUSE-SU-2025:15059-1 — govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media 2026-10-02T18:35:19.365954+00:00

govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0933 WID-SEC-W-2025-0933 — Hashicorp Vault: Mehrere Schwachstellen 2026-10-02T18:35:19.365975+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.