https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:17:09.010641+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T17:17:09.161346+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 Withdrawn: CLEANSTART-2026-AM39668 — yawkat LZ4 Java provides LZ4 compression for Java 2026-10-03T17:17:09.161399+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-323360 EUVD-2026-323360 2026-10-03T17:17:09.161445+00:00 EUVD-2026-323360 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10532 fkie_cve-2026-10532 2026-10-03T17:17:09.161467+00:00

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted.

More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer can instantiate Proxy objects.

Although deserialization is heavily restricted by HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege escalation has been identified, this issue constitutes a bypass of the intended security restrictions.

This issue affects logback: through 1.5.33 inclusive.

 https://cve.radiocsirt.org/vuln/ghsa-jhq6-gfmj-v8fx GHSA-jhq6-gfmj-v8fx — Logback vulnerable to Object Injection through HardenedObjectInputStream modules 2026-10-03T17:17:09.161516+00:00

Affected: Maven: ch.qos.logback:logback-core

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted.

More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer can instantiate Proxy objects.

Although deserialization is heavily restricted by HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege escalation has been identified, this issue constitutes a bypass of the intended security restrictions.

This issue affects logback: through 1.5.33 inclusive.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10999-1 openSUSE-SU-2026:10999-1 — logback-1.5.34-1.1 on GA media 2026-10-03T17:17:09.161565+00:00

logback-1.5.34-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10532 UBUNTU-CVE-2026-10532 2026-10-03T17:17:09.161602+00:00

Affected: Ubuntu:Pro:16.04:LTS: logback, Ubuntu:Pro:18.04:LTS: logback, Ubuntu:Pro:20.04:LTS: logback, Ubuntu:Pro:22.04:LTS: logback, Ubuntu:24.04:LTS: logback, Ubuntu:25.10: logback, Ubuntu:26.04:LTS: logback

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer can instantiate Proxy objects. Although deserialization is heavily restricted by HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege escalation has been identified, this issue constitutes a bypass of the intended security restrictions. This issue affects logback: through 1.5.33 inclusive.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2242 WID-SEC-W-2026-2242 — IBM Operational Decision Manager: Mehrere Schwachstellen 2026-10-03T17:17:09.161664+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Operational Decision Manager ausnutzen, um Sicherheitsbeschränkungen zu umgehen, um einen Denial of Service zu verursachen und Code auszuführen.