https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:04:46.402724+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09565 bdu:2025-09565 2026-10-03T22:04:46.479848+00:00 bdu:2025-09565 https://cve.radiocsirt.org/vuln/bit-vault-2025-5999 BIT-vault-2025-5999 — Vault Root Namespace Operator May Elevate Token Privileges 2026-10-03T22:04:46.479884+00:00

Affected: Bitnami: vault

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

 https://cve.radiocsirt.org/vuln/euvd-2026-248897 EUVD-2026-248897 2026-10-03T22:04:46.479920+00:00 EUVD-2026-248897 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5999 fkie_cve-2025-5999 2026-10-03T22:04:46.479933+00:00

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

 https://cve.radiocsirt.org/vuln/ghsa-6h4p-m86h-hhgh GHSA-6h4p-m86h-hhgh — Hashicorp Vault has Privilege Escalation Vulnerability 2026-10-03T22:04:46.479955+00:00

Affected: Go: github.com/hashicorp/vault

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15434-1 openSUSE-SU-2025:15434-1 — govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media 2026-10-03T22:04:46.479977+00:00

govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1702 WID-SEC-W-2025-1702 — Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen 2026-10-03T22:04:46.480002+00:00

Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.