https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:53:42.634863+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07649 bdu:2025-07649 2026-10-03T11:53:42.653316+00:00 bdu:2025-07649 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0536 certfr-2025-avi-0536 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T11:53:42.653355+00:00 certfr-2025-avi-0536 https://cve.radiocsirt.org/vuln/euvd-2026-290797 EUVD-2026-290797 2026-10-03T11:53:42.653374+00:00 EUVD-2026-290797 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6433 fkie_cve-2025-6433 2026-10-03T11:53:42.653385+00:00

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140.

 https://cve.radiocsirt.org/vuln/ghsa-7f3m-mqm5-5x2c GHSA-7f3m-mqm5-5x2c 2026-10-03T11:53:42.653415+00:00

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability affects Firefox < 140.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15325-1 openSUSE-SU-2025:15325-1 — MozillaFirefox-140.0.2-1.1 on GA media 2026-10-03T11:53:42.653432+00:00

MozillaFirefox-140.0.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:02339-1 SUSE-SU-2025:02339-1 — Security update for MozillaFirefox, MozillaFirefox-branding-SLE 2026-10-03T11:53:42.653453+00:00

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6433 UBUNTU-CVE-2025-6433 2026-10-03T11:53:42.653474+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1395 WID-SEC-W-2025-1395 — Mozilla Firefox: Mehrere Schwachstellen 2026-10-03T11:53:42.653508+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Angriff auszulösen, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff zu starten.