https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:11:42.949342+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01705 bdu:2026-01705 2026-10-02T16:11:43.237819+00:00 bdu:2026-01705 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-02T16:11:43.237890+00:00 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-254722 EUVD-2026-254722 2026-10-02T16:11:43.237914+00:00 EUVD-2026-254722 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4949 fkie_cve-2025-4949 2026-10-02T16:11:43.237927+00:00

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.

 https://cve.radiocsirt.org/vuln/ghsa-vrpq-qp53-qv56 GHSA-vrpq-qp53-qv56 — Eclipse JGit XML External Entity (XXE) Vulnerability 2026-10-02T16:11:43.237960+00:00

Affected: Maven: org.eclipse.jgit:org.eclipse.jgit

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0027 NCSC-2026-0027 — Kwetsbaarheden verholpen in Oracle Fusion Middleware 2026-10-02T16:11:43.237989+00:00 NCSC-2026-0027 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15232-1 openSUSE-SU-2025:15232-1 — jgit-5.11.0-2.1 on GA media 2026-10-02T16:11:43.238042+00:00

jgit-5.11.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:18028 RHSA-2025:18028 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.7 for Spring Boot release. 2026-10-02T16:11:43.238060+00:00

org.eclipse.jgit: XXE vulnerability in Eclipse JGit org.springframework.security/spring-security-core: Spring Security authorization bypass org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4949 UBUNTU-CVE-2025-4949 2026-10-02T16:11:43.238084+00:00

Affected: Ubuntu:16.04:LTS: jgit, Ubuntu:18.04:LTS: jgit, Ubuntu:20.04:LTS: jgit, Ubuntu:22.04:LTS: jgit, Ubuntu:24.04:LTS: jgit, Ubuntu:25.10: jgit, Ubuntu:26.04:LTS: jgit

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2160 WID-SEC-W-2025-2160 — IBM App Connect Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen, Denial of Service, und einen nicht… 2026-10-02T16:11:43.238138+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um einen nicht näher spezifizierten Angriff durchzuführen.