https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:08:40.998115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:11888 ALSA-2025:11888 — Moderate: icu security update 2026-10-03T09:08:41.329079+00:00

Affected: AlmaLinux:10: icu, AlmaLinux:10: libicu, AlmaLinux:10: libicu-devel

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

* icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-10931 bdu:2025-10931 2026-10-03T09:08:41.329148+00:00 bdu:2025-10931 https://cve.radiocsirt.org/vuln/bell-cve-2025-5222 BELL-CVE-2025-5222 2026-10-03T09:08:41.329169+00:00

Affected: Alpaquita:23: icu, Alpaquita:25: icu, Alpaquita:stream: icu, BellSoft Hardened Containers:23: icu, BellSoft Hardened Containers:25: icu, BellSoft Hardened Containers:stream: icu

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T09:08:41.329197+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cleanstart-2026-gc28946 CLEANSTART-2026-GC28946 — Security fix for CVE-2025-5222 applied in: icu 74.2-r1 2026-10-03T09:08:41.329212+00:00

Affected: CleanStart: icu

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-371396 EUVD-2026-371396 2026-10-03T09:08:41.329232+00:00 EUVD-2026-371396 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5222 fkie_cve-2025-5222 2026-10-03T09:08:41.329243+00:00

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-wv79-2fc4-v4hj GHSA-wv79-2fc4-v4hj 2026-10-03T09:08:41.329265+00:00

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

 https://cve.radiocsirt.org/vuln/icsa-26-202-04 ICSA-26-202-04 — Siemens SIDIS Secured SmartPlug 2026-10-03T09:08:41.329279+00:00

SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.

Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-5222 msrc_CVE-2025-5222 — Icu: stack buffer overflow in the srbroot::addtag function 2026-10-03T09:08:41.329305+00:00 msrc_CVE-2025-5222 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 NCSC-2026-0229 — Kwetsbaarheden verholpen in Siemens producten 2026-10-03T09:08:41.329320+00:00 NCSC-2026-0229 https://cve.radiocsirt.org/vuln/oesa-2025-1982 OESA-2025-1982 — icu security update 2026-10-03T09:08:41.329413+00:00

Affected: openEuler:24.03-LTS-SP2: icu, openEuler:20.03-LTS-SP4: icu, openEuler:22.03-LTS-SP3: icu, openEuler:22.03-LTS-SP4: icu, openEuler:24.03-LTS: icu, openEuler:24.03-LTS-SP1: icu

Tools and utilities for developing with icu. Security Fix(es):

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.(CVE-2025-5222)

 https://cve.radiocsirt.org/vuln/rhsa-2025:11888 RHSA-2025:11888 — Red Hat Security Advisory: icu security update 2026-10-03T09:08:41.329488+00:00

icu: Stack buffer overflow in the SRBRoot::addTag function

 https://cve.radiocsirt.org/vuln/ssa-585531 SSA-585531 — SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310 2026-10-03T09:08:41.329542+00:00

SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.

Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5222 UBUNTU-CVE-2025-5222 2026-10-03T09:08:41.329600+00:00

Affected: Ubuntu:Pro:14.04:LTS: icu, Ubuntu:Pro:16.04:LTS: icu, Ubuntu:18.04:LTS: icu, Ubuntu:20.04:LTS: icu, Ubuntu:22.04:LTS: icu, Ubuntu:24.04:LTS: icu, Ubuntu:25.10: icu, Ubuntu:26.04:LTS: icu

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

 https://cve.radiocsirt.org/vuln/vde-2026-088 VDE-2026-088 — METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 2026-10-03T09:08:41.329677+00:00

The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.

The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25

All other vulnerabilities are to be fixed in the upcoming releases.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1406 WID-SEC-W-2025-1406 — International Components for Unicode (icu): Schwachstelle ermöglicht Codeausführung 2026-10-03T09:08:41.329758+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in International Components for Unicode (icu) ausnutzen, um beliebigen Programmcode auszuführen.