https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:51:32.041541+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-377749 EUVD-2026-377749 2026-10-03T01:51:32.090530+00:00 EUVD-2026-377749 https://cve.radiocsirt.org/vuln/fkie_cve-2026-100558 fkie_cve-2026-100558 2026-10-03T01:51:32.090585+00:00

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade requests to exhaust listener resources and cause denial of service without consuming the WebSocket pre-auth connection budget.

 https://cve.radiocsirt.org/vuln/ghsa-5m65-2pj9-qf79 GHSA-5m65-2pj9-qf79 2026-10-03T01:51:32.090634+00:00

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade requests to exhaust listener resources and cause denial of service without consuming the WebSocket pre-auth connection budget.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3316 WID-SEC-W-2026-3316 — OpenClaw: Mehrere Schwachstellen 2026-10-03T01:51:32.090665+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.