https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:23:32.282309+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 certfr-2026-avi-0199 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-04T11:23:32.544591+00:00 certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj02810 Withdrawn: CLEANSTART-2026-AJ02810 — Security fixes in kserve-modelmesh 0.12.0-r0 2026-10-04T11:23:32.544643+00:00

Withdrawn by the publisher.

Affected: CleanStart: kserve-modelmesh

Package kserve-modelmesh version 0.12.0-r0 fixes 20 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2026-33870, CVE-2026-33871, ghsa-7xrh-hqfc-g7qr...

 https://cve.radiocsirt.org/vuln/euvd-2026-266294 EUVD-2026-266294 2026-10-04T11:23:32.544723+00:00 EUVD-2026-266294 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1225 fkie_cve-2026-1225 2026-10-04T11:23:32.544762+00:00

ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration file.

The instantiation of a potentially malicious Java class requires that said class is present on the user's class-path. In addition, the attacker must have write access to a configuration file. However, after successful instantiation, the instance is very likely to be discarded with no further ado.

 https://cve.radiocsirt.org/vuln/ghsa-qqpg-mvqg-649v GHSA-qqpg-mvqg-649v — Logback allows an attacker to instantiate classes already present on the class path 2026-10-04T11:23:32.544804+00:00

Affected: Maven: ch.qos.logback:logback-core

ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration file.

The instantiation of a potentially malicious Java class requires that said class is present on the user's class-path. In addition, the attacker must have write access to a configuration file. However, after successful instantiation, the instance is very likely to be discarded with no further ado.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10114-1 openSUSE-SU-2026:10114-1 — logback-1.2.13-2.1 on GA media 2026-10-04T11:23:32.544845+00:00

logback-1.2.13-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:0361-1 SUSE-SU-2026:0361-1 — Security update for logback 2026-10-04T11:23:32.544877+00:00

Security update for logback

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1225 UBUNTU-CVE-2026-1225 2026-10-04T11:23:32.544903+00:00

Affected: Ubuntu:Pro:16.04:LTS: logback, Ubuntu:Pro:18.04:LTS: logback, Ubuntu:Pro:20.04:LTS: logback, Ubuntu:Pro:22.04:LTS: logback, Ubuntu:24.04:LTS: logback, Ubuntu:25.10: logback, Ubuntu:26.04:LTS: logback

ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration file. The instantiation of a potentially malicious Java class requires that said class is present on the user's class-path. In addition, the attacker must have write access to a configuration file. However, after successful instantiation, the instance is very likely to be discarded with no further ado.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0202 WID-SEC-W-2026-0202 — Logback: Schwachstelle ermöglicht Manipulation von Daten 2026-10-04T11:23:32.544952+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Logback ausnutzen, um Daten zu manipulieren.