https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:39:35.949831+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10870 bdu:2026-10870 2026-10-02T13:39:36.396022+00:00 bdu:2026-10870 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0810 certfr-2026-avi-0810 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T13:39:36.396094+00:00 certfr-2026-avi-0810 https://cve.radiocsirt.org/vuln/cleanstart-2026-bk55944 Withdrawn: CLEANSTART-2026-BK55944 — Security fixes for CVE-2025-59250, CVE-2026-0636, CVE-2026-33870, CVE-2026-33871, CVE-2026-39852, CVE-2026-41417, CVE-2… 2026-10-02T13:39:36.396116+00:00

Withdrawn by the publisher.

Affected: CleanStart: keycloak

Multiple security vulnerabilities affect the keycloak package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-371770 EUVD-2026-371770 2026-10-02T13:39:36.396157+00:00 EUVD-2026-371770 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0636 fkie_cve-2026-0636 2026-10-02T13:39:36.396170+00:00

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).

This vulnerability is associated with program files LDAPStoreHelper.

This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

 https://cve.radiocsirt.org/vuln/ghsa-c3fc-8qff-9hwx GHSA-c3fc-8qff-9hwx — Bouncy Castle has an LDAP injection 2026-10-02T13:39:36.396197+00:00

Affected: Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk18on

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper.

This issue affects BC-JAVA: from 1.74 before 1.84.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10571-1 openSUSE-SU-2026:10571-1 — bouncycastle-1.84-1.1 on GA media 2026-10-02T13:39:36.396224+00:00

bouncycastle-1.84-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:11720 RHSA-2026:11720 — Red Hat Security Advisory: Red Hat build of Quarkus 3.20.6.SP1 security update 2026-10-02T13:39:36.396244+00:00

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests

 https://cve.radiocsirt.org/vuln/suse-su-2026:21404-1 SUSE-SU-2026:21404-1 — Security update for bouncycastle 2026-10-02T13:39:36.396266+00:00

Security update for bouncycastle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0636 UBUNTU-CVE-2026-0636 2026-10-02T13:39:36.396284+00:00

Affected: Ubuntu:Pro:16.04:LTS: bouncycastle, Ubuntu:Pro:18.04:LTS: bouncycastle, Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle, Ubuntu:25.10: bouncycastle, Ubuntu:26.04:LTS: bouncycastle

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1129 WID-SEC-W-2026-1129 — Bouncy Castle BC-JAVA: Mehrere Schwachstellen 2026-10-02T13:39:36.396351+00:00

Ein Angreifer kann mehrere Schwachstellen in Bouncy Castle BC-JAVA ausnutzen, um kryptografische Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.