https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:59:32.307352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10863 bdu:2026-10863 2026-10-03T14:59:32.606576+00:00 bdu:2026-10863 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T14:59:32.606626+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cleanstart-2026-gu43525 CLEANSTART-2026-GU43525 — In Jakarta Mail versions prior to 2 2026-10-03T14:59:32.606648+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2.

 https://cve.radiocsirt.org/vuln/euvd-2026-329167 EUVD-2026-329167 2026-10-03T14:59:32.606681+00:00 EUVD-2026-329167 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7962 fkie_cve-2025-7962 2026-10-03T14:59:32.606694+00:00

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

 https://cve.radiocsirt.org/vuln/ghsa-9342-92gg-6v29 GHSA-9342-92gg-6v29 — Jakarta Mail vulnerable to SMTP Injection 2026-10-03T14:59:32.606717+00:00

Affected: Maven: org.eclipse.angus:smtp, Maven: com.sun.mail:jakarta.mail

In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

 https://cve.radiocsirt.org/vuln/oesa-2025-1987 OESA-2025-1987 — jakarta-mail security update 2026-10-03T14:59:32.606742+00:00

Affected: openEuler:24.03-LTS-SP1: jakarta-mail

The Jakarta Mail API provides a platform-independent and protocol-independent framework to build mail and messaging applications. Security Fix(es):

A vulnerability has been found in Eclipse Jakarta Mail 2.2 and classified as problematic.The CWE definition for the vulnerability is CWE-147. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as input terminators when they are sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-7962)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15378-1 openSUSE-SU-2025:15378-1 — javamail-1.6.2-3.1 on GA media 2026-10-03T14:59:32.606767+00:00

javamail-1.6.2-3.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7962 UBUNTU-CVE-2025-7962 2026-10-03T14:59:32.606786+00:00

Affected: Ubuntu:22.04:LTS: jakarta-mail, Ubuntu:24.04:LTS: jakarta-mail, Ubuntu:25.10: jakarta-mail, Ubuntu:26.04:LTS: jakarta-mail

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1870 WID-SEC-W-2025-1870 — Keycloak: Schwachstelle ermöglicht Versand beliebiger E-Mails 2026-10-03T14:59:32.606810+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um beliebige E-Mails zu senden.