https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:38:19.960372+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09490 bdu:2025-09490 2026-10-02T19:38:19.969905+00:00 bdu:2025-09490 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1072 certfr-2025-avi-1072 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:38:19.969937+00:00 certfr-2025-avi-1072 https://cve.radiocsirt.org/vuln/cleanstart-2026-of17843 Withdrawn: CLEANSTART-2026-OF17843 — Security fixes in wso2is 7.0.0-r0 2026-10-02T19:38:19.969955+00:00

Withdrawn by the publisher.

Affected: CleanStart: wso2is

Package wso2is version 7.0.0-r0 fixes 17 vulnerabilities: CVE-2025-8671, CVE-2025-23184, CVE-2025-48734, CVE-2025-48795, CVE-2025-48924...

 https://cve.radiocsirt.org/vuln/euvd-2026-259969 EUVD-2026-259969 2026-10-02T19:38:19.969984+00:00 EUVD-2026-259969 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48795 fkie_cve-2025-48795 2026-10-02T19:38:19.969996+00:00

Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of service attack by causing an out of memory exception. In addition, it is possible to configure CXF to encrypt temporary files to prevent sensitive credentials from being cached unencrypted on the local filesystem, however this bug means that the cached files are written out to logs unencrypted.

Users are recommended to upgrade to versions 3.5.11, 3.6.6, 4.0.7 or 4.1.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-36wv-v2qp-v4g4 GHSA-36wv-v2qp-v4g4 — Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged 2026-10-02T19:38:19.970021+00:00

Affected: Maven: org.apache.cxf:cxf-core

Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of service attack by causing an out of memory exception. In addition, it is possible to configure CXF to encrypt temporary files to prevent sensitive credentials from being cached unencrypted on the local filesystem, however this bug means that the cached files are written out to logs unencrypted.

Users are recommended to upgrade to versions 3.5.11, 3.6.6, 4.0.7 or 4.1.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0025 NCSC-2026-0025 — Kwetsbaarheden verholpen in Oracle Financial Services 2026-10-02T19:38:19.970046+00:00 NCSC-2026-0025 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1574 WID-SEC-W-2025-1574 — Apache CXF: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2026-10-02T19:38:19.970078+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache CXF ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.