https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:20:08.348315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-14688 bdu:2025-14688 2026-10-03T06:20:08.533994+00:00 bdu:2025-14688 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1129 certfr-2025-avi-1129 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T06:20:08.534051+00:00 certfr-2025-avi-1129 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad41794 Withdrawn: CLEANSTART-2026-AD41794 — SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the c… 2026-10-03T06:20:08.534071+00:00

Withdrawn by the publisher.

Affected: CleanStart: cert-manager-webhook-pdns-fips

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-261473 EUVD-2026-261473 2026-10-03T06:20:08.534102+00:00 EUVD-2026-261473 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58181 fkie_cve-2025-58181 2026-10-03T06:20:08.534115+00:00

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

 https://cve.radiocsirt.org/vuln/ghsa-j5w8-q4qc-rx2x GHSA-j5w8-q4qc-rx2x — golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption 2026-10-03T06:20:08.534137+00:00

Affected: Go: golang.org/x/crypto

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

 https://cve.radiocsirt.org/vuln/oesa-2026-3398 OESA-2026-3398 — buildah security update 2026-10-03T06:20:08.534157+00:00

Affected: openEuler:22.03-LTS-SP4: buildah

The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image Security Fix(es):

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)

 https://cve.radiocsirt.org/vuln/opensuse-ru-2026:20010-1 openSUSE-RU-2026:20010-1 — Recommended update for trivy 2026-10-03T06:20:08.534183+00:00

Recommended update for trivy

 https://cve.radiocsirt.org/vuln/rhsa-2026:15979 RHSA-2026:15979 — Red Hat Security Advisory: Red Hat Ceph Storage 2026-10-03T06:20:08.534203+00:00

nodemailer: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate js-yaml: js-yaml prototype pollution in merge glob: glob: Command Injection Vulnerability via Malicious Filenames github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation

 https://cve.radiocsirt.org/vuln/suse-su-2026:0439-1 SUSE-SU-2026:0439-1 — Security update for apptainer 2026-10-03T06:20:08.534229+00:00

Security update for apptainer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-58181 UBUNTU-CVE-2025-58181 2026-10-03T06:20:08.534249+00:00

Affected: Ubuntu:Pro:16.04:LTS: google-guest-agent, Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:18.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: snapd and 13 more

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2645 WID-SEC-W-2025-2645 — Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T06:20:08.534296+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service Angriff durchzuführen.