https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:33:28.733082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0523 certfr-2026-avi-0523 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:33:28.890559+00:00 certfr-2026-avi-0523 https://cve.radiocsirt.org/vuln/cleanstart-2026-lc05413 Withdrawn: CLEANSTART-2026-LC05413 — Security fixes for CVE-2025-15599, CVE-2025-62718, CVE-2025-69873, CVE-2026-0540, CVE-2026-25639, CVE-2026-2739, CVE-20… 2026-10-02T19:33:28.890601+00:00

Withdrawn by the publisher.

Affected: CleanStart: opensearch-dashboards-fips

Multiple security vulnerabilities affect the opensearch-dashboards-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-277443 EUVD-2026-277443 2026-10-02T19:33:28.890639+00:00 EUVD-2026-277443 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0540 fkie_cve-2026-0540 2026-10-02T19:33:28.890652+00:00

DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements (noscript, xmp, noembed, noframes, iframe) in the SAFE_FOR_XML regex. Attackers can include payloads like </noscript><img src=x onerror=alert(1)> in attribute values to execute JavaScript when sanitized output is placed inside these unprotected rawtext contexts.

 https://cve.radiocsirt.org/vuln/ghsa-v2wj-7wpq-c8vv GHSA-v2wj-7wpq-c8vv — DOMPurify contains a Cross-site Scripting vulnerability 2026-10-02T19:33:28.890677+00:00

Affected: npm: dompurify

DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in 2.5.9 and 3.3.2, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements (noscript, xmp, noembed, noframes, iframe) in the `SAFE_FOR_XML` regex. Attackers can include payloads like `</noscript><img src=x onerror=alert(1)>` in attribute values to execute JavaScript when sanitized output is placed inside these unprotected rawtext contexts.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0540 UBUNTU-CVE-2026-0540 2026-10-02T19:33:28.890701+00:00

Affected: Ubuntu:22.04:LTS: node-dompurify, Ubuntu:24.04:LTS: node-dompurify, Ubuntu:25.10: node-dompurify, Ubuntu:26.04:LTS: node-dompurify

DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements (noscript, xmp, noembed, noframes, iframe) in the SAFE_FOR_XML regex. Attackers can include payloads like </noscript><img src=x onerror=alert(1)> in attribute values to execute JavaScript when sanitized output is placed inside these unprotected rawtext contexts.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 WID-SEC-W-2026-1007 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-02T19:33:28.890727+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.