https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:21:11.836516+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277703 EUVD-2026-277703 2026-10-03T07:21:11.898476+00:00 EUVD-2026-277703 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0980 fkie_cve-2026-0980 2026-10-03T07:21:11.898519+00:00

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

 https://cve.radiocsirt.org/vuln/ghsa-hfcp-477w-3wjw GHSA-hfcp-477w-3wjw — rubyipmi is vulnerable to OS Command Injection through malicious usernames 2026-10-03T07:21:11.898553+00:00

Affected: RubyGems: rubyipmi

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

 https://cve.radiocsirt.org/vuln/rhsa-2026:5968 RHSA-2026:5968 — Red Hat Security Advisory: Satellite 6.18.4 Async Update 2026-10-03T07:21:11.898579+00:00

golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification forman: Foreman: Remote Code Execution via command injection in WebSocket proxy rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 WID-SEC-W-2026-1007 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-03T07:21:11.898609+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.