https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:28:56.609650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337531 EUVD-2026-337531 2026-10-03T04:28:56.712425+00:00 EUVD-2026-337531 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1530 fkie_cve-2026-1530 2026-10-03T04:28:56.712465+00:00

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

 https://cve.radiocsirt.org/vuln/ghsa-m3hq-3qj8-c5fm GHSA-m3hq-3qj8-c5fm — fog-kubevirt allows remote attacker to perform MITM attack due to disabled certificate validation 2026-10-03T04:28:56.712499+00:00

Affected: RubyGems: fog-kubevirt

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

 https://cve.radiocsirt.org/vuln/rhsa-2026:5970 RHSA-2026:5970 — Red Hat Security Advisory: Satellite 6.17.7 Async Update 2026-10-03T04:28:56.712525+00:00

Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS Django: Django: Denial of Service via crafted request with duplicate headers crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username Django: Django: SQL Injection via RasterField band index parameter Django: Django: Denial of Service via crafted HTML inputs Django: Django: SQL Injection via crafted column aliases Django: Django: SQL injection via crafted column aliases in QuerySet.order_by() fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification forman: Foreman: Remote Code Execution via command injection in WebSocket proxy rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 WID-SEC-W-2026-1007 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-03T04:28:56.712566+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.