https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:11:46.336370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-02T14:11:46.428842+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 Withdrawn: CLEANSTART-2026-BA61304 — Security fixes in cosign 2.4.3-r0 2026-10-02T14:11:46.428883+00:00

Withdrawn by the publisher.

Affected: CleanStart: cosign

Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

 https://cve.radiocsirt.org/vuln/euvd-2026-270790 EUVD-2026-270790 2026-10-02T14:11:46.428914+00:00 EUVD-2026-270790 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8556 fkie_cve-2025-8556 2026-10-02T14:11:46.428927+00:00

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

 https://cve.radiocsirt.org/vuln/ghsa-2x5j-vhc8-9cwm GHSA-2x5j-vhc8-9cwm — CIRCL-Fourq: Missing and wrong validation can lead to incorrect results 2026-10-02T14:11:46.428950+00:00

Affected: Go: github.com/cloudflare/circl

### Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.

Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.

### Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.

We acknowledge Alon Livne (Botanica Software Labs) for the reported findings.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10013-1 openSUSE-SU-2026:10013-1 — apptainer-1.4.5-1.1 on GA media 2026-10-02T14:11:46.428975+00:00

apptainer-1.4.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:0439-1 SUSE-SU-2026:0439-1 — Security update for apptainer 2026-10-02T14:11:46.428994+00:00

Security update for apptainer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8556 UBUNTU-CVE-2025-8556 2026-10-02T14:11:46.429013+00:00

Affected: Ubuntu:22.04:LTS: golang-github-cloudflare-circl, Ubuntu:24.04:LTS: golang-github-cloudflare-circl

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.