https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:08:51.190020+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09564 bdu:2025-09564 2026-10-02T19:08:51.292930+00:00 bdu:2025-09564 https://cve.radiocsirt.org/vuln/bit-vault-2025-6004 BIT-vault-2025-6004 — Vault Userpass and LDAP User Lockout Bypass 2026-10-02T19:08:51.292982+00:00

Affected: Bitnami: vault

Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

 https://cve.radiocsirt.org/vuln/euvd-2026-248914 EUVD-2026-248914 2026-10-02T19:08:51.293034+00:00 EUVD-2026-248914 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6004 fkie_cve-2025-6004 2026-10-02T19:08:51.293055+00:00

Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

 https://cve.radiocsirt.org/vuln/ghsa-qgj7-fmq2-6cc4 GHSA-qgj7-fmq2-6cc4 — Hashicorp Vault has Lockout Feature Authentication Bypass 2026-10-02T19:08:51.293088+00:00

Affected: Go: github.com/hashicorp/vault

Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15434-1 openSUSE-SU-2025:15434-1 — govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media 2026-10-02T19:08:51.293122+00:00

govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1702 WID-SEC-W-2025-1702 — Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen 2026-10-02T19:08:51.293171+00:00

Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.