https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:14:50.947799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:4597 ALSA-2025:4597 — Moderate: mod_auth_openidc:2.3 security update 2026-10-09T15:14:50.959734+00:00

Affected: AlmaLinux:8: cjose, AlmaLinux:8: cjose-devel, AlmaLinux:8: mod_auth_openidc

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

Security Fix(es):

* mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-10948 bdu:2025-10948 2026-10-09T15:14:50.959790+00:00 bdu:2025-10948 https://cve.radiocsirt.org/vuln/euvd-2026-331196 EUVD-2026-331196 2026-10-09T15:14:50.959806+00:00 EUVD-2026-331196 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3891 fkie_cve-2025-3891 2026-10-09T15:14:50.959818+00:00

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

 https://cve.radiocsirt.org/vuln/ghsa-v96g-5j57-774c GHSA-v96g-5j57-774c 2026-10-09T15:14:50.959838+00:00

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

 https://cve.radiocsirt.org/vuln/rhsa-2025:10002 RHSA-2025:10002 — Red Hat Security Advisory: mod_auth_openidc security update 2026-10-09T15:14:50.959852+00:00

mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled

 https://cve.radiocsirt.org/vuln/rhsa-2025:4597 RHSA-2025:4597 — Red Hat Security Advisory: mod_auth_openidc:2.3 security update 2026-10-09T15:14:50.959867+00:00

mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled

 https://cve.radiocsirt.org/vuln/suse-su-2025:01585-1 SUSE-SU-2025:01585-1 — Security update for apache2-mod_auth_openidc 2026-10-09T15:14:50.959880+00:00

Security update for apache2-mod_auth_openidc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3891 UBUNTU-CVE-2025-3891 2026-10-09T15:14:50.959893+00:00

Affected: Ubuntu:16.04:LTS: libapache2-mod-auth-openidc, Ubuntu:18.04:LTS: libapache2-mod-auth-openidc, Ubuntu:20.04:LTS: libapache2-mod-auth-openidc, Ubuntu:22.04:LTS: libapache2-mod-auth-openidc, Ubuntu:24.04:LTS: libapache2-mod-auth-openidc, Ubuntu:25.10: libapache2-mod-auth-openidc, Ubuntu:26.04:LTS: libapache2-mod-auth-openidc

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0956 WID-SEC-W-2025-0956 — Red Hat Enterprise Linux (mod_auth_openidc): Schwachstelle ermöglicht Denial of Service 2026-10-09T15:14:50.959919+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.