https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:12:57.111745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T20:12:57.213389+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-fv50118 CLEANSTART-2026-FV50118 — Path-traversal vulnerability in QOS 2026-10-03T20:12:57.213432+00:00

Affected: CleanStart: apache-nifi

Security vulnerability affects the apache-nifi package. Path-traversal vulnerability in QOS.

 https://cve.radiocsirt.org/vuln/euvd-2026-352906 EUVD-2026-352906 2026-10-03T20:12:57.213462+00:00 EUVD-2026-352906 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19880 fkie_cve-2026-19880 2026-10-03T20:12:57.213476+00:00

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value (e.g. via an HTTP header) create and append log files outside the intended directory.

This issue affects Logback-classic: from 0.9.14 through 1.6.2.

 https://cve.radiocsirt.org/vuln/ghsa-9mh8-hq67-v26g GHSA-9mh8-hq67-v26g 2026-10-03T20:12:57.213502+00:00

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value (e.g. via an HTTP header) create and append log files outside the intended directory.

This issue affects Logback-classic: from 0.9.14 through 1.6.2.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0375 NCSC-2026-0375 — Kwetsbaarheden verholpen in Oracle Communications 2026-10-03T20:12:57.213520+00:00 NCSC-2026-0375 https://cve.radiocsirt.org/vuln/oesa-2026-4014 OESA-2026-4014 — logback security update 2026-10-03T20:12:57.213576+00:00

Affected: openEuler:24.03-LTS-SP4: logback, openEuler:20.03-LTS-SP4: logback, openEuler:22.03-LTS-SP4: logback, openEuler:24.03-LTS-SP1: logback, openEuler:24.03-LTS-SP3: logback

Logback is intended as a successor to the popular log4j project. Security Fix(es):

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value (e.g. via an HTTP header) create and append log files outside the intended directory. This issue affects Logback-classic: from 0.9.14 through 1.6.2.(CVE-2026-19880)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11965-1 openSUSE-SU-2026:11965-1 — logback-1.6.5-1.1 on GA media 2026-10-03T20:12:57.213606+00:00

logback-1.6.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19880 UBUNTU-CVE-2026-19880 2026-10-03T20:12:57.213623+00:00

Affected: Ubuntu:Pro:16.04:LTS: logback, Ubuntu:Pro:18.04:LTS: logback, Ubuntu:Pro:20.04:LTS: logback, Ubuntu:Pro:22.04:LTS: logback, Ubuntu:24.04:LTS: logback, Ubuntu:26.04:LTS: logback

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value (e.g. via an HTTP header) create and append log files outside the intended directory. This issue affects Logback-classic: from 0.9.14 through 1.6.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3403 WID-SEC-W-2026-3403 — Oracle Communications: Mehrere Schwachstellen 2026-10-03T20:12:57.213650+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.