https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:33:33.225103+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15897 bdu:2025-15897 2026-10-02T19:33:33.290794+00:00 bdu:2025-15897 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1079 certfr-2025-avi-1079 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:33:33.290831+00:00 certfr-2025-avi-1079 https://cve.radiocsirt.org/vuln/euvd-2026-262972 EUVD-2026-262972 2026-10-02T19:33:33.290851+00:00 EUVD-2026-262972 https://cve.radiocsirt.org/vuln/fkie_cve-2025-42873 fkie_cve-2025-42873 2026-10-02T19:33:33.290864+00:00

SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop causes high CPU usage and system unresponsiveness due to a blocked processing thread. This vulnerability has no impact on confidentiality or integrity but has a high impact on system availability.

 https://cve.radiocsirt.org/vuln/ghsa-rvp5-chfc-grq8 GHSA-rvp5-chfc-grq8 2026-10-02T19:33:33.290896+00:00

SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop causes high CPU usage and system unresponsiveness due to a blocked processing thread. This vulnerability has no impact on confidentiality or integrity but has a high impact on system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2768 WID-SEC-W-2025-2768 — SAP Patchday Dezember 2025: Mehrere Schwachstellen 2026-10-02T19:33:33.290913+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP ausnutzen, um beliebigen Code auszuführen, Systeme zu übernehmen, sensible Daten abzuziehen, interne Ressourcen über SSRF anzusteuern, Dienste zum Absturz zu bringen oder Autorisierungsgrenzen zu umgehen.