https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:57:10.989210+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09582 bdu:2025-09582 2026-10-03T10:57:11.080827+00:00 bdu:2025-09582 https://cve.radiocsirt.org/vuln/bit-vault-2025-6013 BIT-vault-2025-6013 — Vault LDAP MFA Enforcement Bypass When Using Username As Alias 2026-10-03T10:57:11.080879+00:00

Affected: Bitnami: vault

Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set to true and a user had multiple CNs that are equal but with leading or trailing spaces. Fixed in Vault Community Edition 1.20.2 and Vault Enterprise 1.20.2, 1.19.8, 1.18.13, and 1.16.24.

 https://cve.radiocsirt.org/vuln/euvd-2026-272506 EUVD-2026-272506 2026-10-03T10:57:11.080933+00:00 EUVD-2026-272506 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6013 fkie_cve-2025-6013 2026-10-03T10:57:11.080954+00:00

Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set to true and a user had multiple CNs that are equal but with leading or trailing spaces. Fixed in Vault Community Edition 1.20.2 and Vault Enterprise 1.20.2, 1.19.8, 1.18.13, and 1.16.24.

 https://cve.radiocsirt.org/vuln/ghsa-7rx2-769v-hrwf GHSA-7rx2-769v-hrwf — HashiCorp Vault ldap auth method may not have correctly enforced MFA 2026-10-03T10:57:11.080993+00:00

Affected: Go: github.com/hashicorp/vault

Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set to true and a user had multiple CNs that are equal but with leading or trailing spaces. Fixed in Vault Community Edition 1.20.2 and Vault Enterprise 1.20.2, 1.19.8, 1.18.13, and 1.16.24.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15434-1 openSUSE-SU-2025:15434-1 — govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media 2026-10-03T10:57:11.081033+00:00

govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1730 WID-SEC-W-2025-1730 — Hashicorp Vault: Schwachstelle ermöglicht Umgehen der MFA 2026-10-03T10:57:11.081091+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hashicorp Vault ausnutzen, um die Multi-Faktor-Authentifizierung zu umgehen.