https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:06:15.206947+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09562 bdu:2025-09562 2026-10-02T17:06:15.213129+00:00 bdu:2025-09562 https://cve.radiocsirt.org/vuln/bit-vault-2025-6000 BIT-vault-2025-6000 — Arbitrary Remote Code Execution via Plugin Catalog Abuse 2026-10-02T17:06:15.213166+00:00

Affected: Bitnami: vault

A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

 https://cve.radiocsirt.org/vuln/cleanstart-2026-bi76968 CLEANSTART-2026-BI76968 — privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on… 2026-10-02T17:06:15.213201+00:00

Affected: CleanStart: vault

Security vulnerability affects the vault package. A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration.

 https://cve.radiocsirt.org/vuln/euvd-2026-248898 EUVD-2026-248898 2026-10-02T17:06:15.213225+00:00 EUVD-2026-248898 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6000 fkie_cve-2025-6000 2026-10-02T17:06:15.213237+00:00

A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

 https://cve.radiocsirt.org/vuln/ghsa-mr4h-qf9j-f665 GHSA-mr4h-qf9j-f665 — Hashicorp Vault has Code Execution Vulnerability via Plugin Configuration 2026-10-02T17:06:15.213259+00:00

Affected: Go: github.com/hashicorp/vault

A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15434-1 openSUSE-SU-2025:15434-1 — govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media 2026-10-02T17:06:15.213279+00:00

govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1702 WID-SEC-W-2025-1702 — Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen 2026-10-02T17:06:15.213307+00:00

Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.