https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:44:26.303542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T07:44:26.420009+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4 2026-10-03T07:44:26.420060+00:00

Withdrawn by the publisher.

Affected: CleanStart: stargate

Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...

 https://cve.radiocsirt.org/vuln/euvd-2026-253323 EUVD-2026-253323 2026-10-03T07:44:26.420095+00:00 EUVD-2026-253323 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53864 fkie_cve-2025-53864 2026-10-03T07:44:26.420109+00:00

Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.

 https://cve.radiocsirt.org/vuln/ghsa-xwmg-2g98-w7v9 GHSA-xwmg-2g98-w7v9 — Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON 2026-10-03T07:44:26.420134+00:00

Affected: Maven: com.nimbusds:nimbus-jose-jwt

Connect2id Nimbus JOSE + JWT before 10.0.2 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0027 NCSC-2026-0027 — Kwetsbaarheden verholpen in Oracle Fusion Middleware 2026-10-03T07:44:26.420158+00:00 NCSC-2026-0027 https://cve.radiocsirt.org/vuln/rhsa-2025:12511 RHSA-2025:12511 — Red Hat Security Advisory: Streams for Apache Kafka 3.0.0 release and security update 2026-10-03T07:44:26.420212+00:00

json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority jetty-server: Jetty: Gzip Request Body Buffer Corruption kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider netty: Denial of Service attack on windows app using Netty kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine netty: Denial of Service attack on windows app using Netty commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53864 UBUNTU-CVE-2025-53864 2026-10-03T07:44:26.420252+00:00

Affected: Ubuntu:Pro:16.04:LTS: libgoogle-gson-java, Ubuntu:Pro:18.04:LTS: libgoogle-gson-java, Ubuntu:20.04:LTS: libgoogle-gson-java, Ubuntu:22.04:LTS: libgoogle-gson-java, Ubuntu:24.04:LTS: libgoogle-gson-java, Ubuntu:25.10: libgoogle-gson-java, Ubuntu:26.04:LTS: libgoogle-gson-java

Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2154 WID-SEC-W-2025-2154 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-03T07:44:26.420282+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.