https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:19:33.422246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:38500 ALSA-2026:38500 — Important: maven:3.9 security update 2026-10-03T08:19:33.884157+00:00

Affected: AlmaLinux:9: aopalliance, AlmaLinux:9: apache-commons-cli, AlmaLinux:9: apache-commons-codec, AlmaLinux:9: apache-commons-io, AlmaLinux:9: atinject, AlmaLinux:9: google-guice, AlmaLinux:9: guava, AlmaLinux:9: httpcomponents-client, AlmaLinux:9: httpcomponents-core, AlmaLinux:9: jakarta-annotations and 22 more

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0381 certfr-2026-avi-0381 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-03T08:19:33.884293+00:00 certfr-2026-avi-0381 https://cve.radiocsirt.org/vuln/cleanstart-2026-ao61361 Withdrawn: CLEANSTART-2026-AO61361 — Security fixes for CVE-2024-6763, CVE-2025-11143, CVE-2025-12183, CVE-2025-12383, CVE-2025-66566, CVE-2025-67030, CVE-2… 2026-10-03T08:19:33.884316+00:00

Withdrawn by the publisher.

Affected: CleanStart: kafka-fips

Multiple security vulnerabilities affect the kafka-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-369277 EUVD-2026-369277 2026-10-03T08:19:33.884342+00:00 EUVD-2026-369277 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67030 fkie_cve-2025-67030 2026-10-03T08:19:33.884355+00:00

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

 https://cve.radiocsirt.org/vuln/ghsa-6fmv-xxpf-w3cw GHSA-6fmv-xxpf-w3cw — Plexus-Utils has a Directory Traversal vulnerability in its extractFile method 2026-10-03T08:19:33.884378+00:00

Affected: Maven: org.codehaus.plexus:plexus-utils

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-67030 msrc_CVE-2025-67030 — Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6… 2026-10-03T08:19:33.884400+00:00 msrc_CVE-2025-67030 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10439-1 openSUSE-SU-2026:10439-1 — plexus-utils-4.0.2-2.1 on GA media 2026-10-03T08:19:33.884418+00:00

plexus-utils-4.0.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:17668 RHSA-2026:17668 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release. 2026-10-03T08:19:33.884434+00:00

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables camel-infinispan: camel-infinispan: Remote Code Execution via Unsafe Deserialization Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication Apache Camel: camel-coap: Apache Camel camel-coap: Remote code execution via CoAP URI query parameter injection Apache Camel: Camel-Mail: Camel-Mail: Altered application behavior via header injection io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corru…

 https://cve.radiocsirt.org/vuln/rlsa-2026:38500 RLSA-2026:38500 — Important: maven:3.9 security update 2026-10-03T08:19:33.884497+00:00

Affected: Rocky Linux:9: maven, Rocky Linux:9: plexus-utils, Rocky Linux:9: aopalliance, Rocky Linux:9: apache-commons-cli, Rocky Linux:9: apache-commons-codec, Rocky Linux:9: apache-commons-io, Rocky Linux:9: atinject, Rocky Linux:9: google-guice, Rocky Linux:9: guava, Rocky Linux:9: httpcomponents-client and 14 more

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:21194-1 SUSE-SU-2026:21194-1 — Security update for plexus-utils 2026-10-03T08:19:33.884550+00:00

Security update for plexus-utils

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67030 UBUNTU-CVE-2025-67030 2026-10-03T08:19:33.884567+00:00

Affected: Ubuntu:14.04:LTS: plexus-utils, Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils, Ubuntu:16.04:LTS: plexus-utils2, Ubuntu:18.04:LTS: plexus-utils, Ubuntu:18.04:LTS: plexus-utils2, Ubuntu:20.04:LTS: plexus-utils2, Ubuntu:22.04:LTS: plexus-utils2, Ubuntu:24.04:LTS: plexus-utils2, Ubuntu:26.04:LTS: plexus-utils2

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1429 WID-SEC-W-2026-1429 — IBM App Connect Enterprise: Schwachstelle ermöglicht Codeausführung 2026-10-03T08:19:33.884598+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise und IBM Integration Bus ausnutzen, um beliebigen Programmcode auszuführen.