https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:07:37.016822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15579 bdu:2025-15579 2026-10-03T15:07:37.230565+00:00 bdu:2025-15579 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T15:07:37.230609+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4 2026-10-03T15:07:37.230627+00:00

Withdrawn by the publisher.

Affected: CleanStart: stargate

Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...

 https://cve.radiocsirt.org/vuln/euvd-2026-239156 EUVD-2026-239156 2026-10-03T15:07:37.230659+00:00 EUVD-2026-239156 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46392 fkie_cve-2025-46392 2026-10-03T15:07:37.230672+00:00

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.

There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenario's where you only load trusted configurations.

Users that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration.

 https://cve.radiocsirt.org/vuln/ghsa-pvp8-3xj6-8c6x GHSA-pvp8-3xj6-8c6x — Apache Commons Configuration Uncontrolled Resource Consumption 2026-10-03T15:07:37.230702+00:00

Affected: Maven: commons-configuration:commons-configuration

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.

There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenarios where you only load trusted configurations.

Users that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-46392 UBUNTU-CVE-2025-46392 2026-10-03T15:07:37.230727+00:00

Affected: Ubuntu:14.04:LTS: commons-configuration, Ubuntu:16.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration, Ubuntu:20.04:LTS: commons-configuration, Ubuntu:22.04:LTS: commons-configuration, Ubuntu:24.04:LTS: commons-configuration, Ubuntu:25.10: commons-configuration, Ubuntu:26.04:LTS: commons-configuration

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenario's where you only load trusted configurations. Users that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0997 WID-SEC-W-2025-0997 — Apache Commons Configuration: Schwachstelle ermöglicht Denial of Service 2026-10-03T15:07:37.230762+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons Configuration ausnutzen, um einen Denial of Service Angriff durchzuführen.