https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:53:07.005128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-13871 bdu:2025-13871 2026-10-02T20:53:07.013925+00:00 bdu:2025-13871 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0621 certfr-2025-avi-0621 — De multiples vulnérabilités ont été découvertes dans Tenable Identity Exposure. Certaines d'entre elles permettent à un… 2026-10-02T20:53:07.013961+00:00 certfr-2025-avi-0621 https://cve.radiocsirt.org/vuln/euvd-2026-340576 EUVD-2026-340576 2026-10-02T20:53:07.013981+00:00 EUVD-2026-340576 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4748 fkie_cve-2025-4748 2026-10-02T20:53:07.013993+00:00

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.

This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-4748 msrc_CVE-2025-4748 — Absolute path traversal in zip:unzip/1,2 2026-10-02T20:53:07.014025+00:00 msrc_CVE-2025-4748 https://cve.radiocsirt.org/vuln/oesa-2025-1767 OESA-2025-1767 — erlang security update 2026-10-02T20:53:07.014042+00:00

Affected: openEuler:24.03-LTS-SP1: erlang, openEuler:24.03-LTS-SP2: erlang, openEuler:20.03-LTS-SP4: erlang, openEuler:22.03-LTS-SP3: erlang, openEuler:22.03-LTS-SP4: erlang, openEuler:24.03-LTS: erlang

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fix(es):

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.

This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.(CVE-2025-4748)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10947-1 openSUSE-SU-2026:10947-1 — erlang27-27.1.3-2.1 on GA media 2026-10-02T20:53:07.014077+00:00

erlang27-27.1.3-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22082-1 SUSE-SU-2026:22082-1 — Security update for erlang 2026-10-02T20:53:07.014098+00:00

Security update for erlang

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4748 UBUNTU-CVE-2025-4748 2026-10-02T20:53:07.014114+00:00

Affected: Ubuntu:Pro:14.04:LTS: erlang, Ubuntu:Pro:16.04:LTS: erlang, Ubuntu:Pro:18.04:LTS: erlang, Ubuntu:Pro:20.04:LTS: erlang, Ubuntu:22.04:LTS: erlang, Ubuntu:24.04:LTS: erlang, Ubuntu:25.10: erlang

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1333 WID-SEC-W-2025-1333 — Erlang/OTP: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T20:53:07.014144+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Erlang/OTP ausnutzen, um Dateien zu manipulieren.