https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:37:52.950341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03480 bdu:2026-03480 2026-10-04T06:37:53.092478+00:00 bdu:2026-03480 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0323 certfr-2026-avi-0323 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-04T06:37:53.092524+00:00 certfr-2026-avi-0323 https://cve.radiocsirt.org/vuln/cleanstart-2026-aq60759 CLEANSTART-2026-AQ60759 — When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibilit… 2026-10-04T06:37:53.092543+00:00

Affected: CleanStart: apache-nifi

Security vulnerability affects the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.

 https://cve.radiocsirt.org/vuln/euvd-2026-278643 EUVD-2026-278643 2026-10-04T06:37:53.092574+00:00 EUVD-2026-278643 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22732 fkie_cve-2026-22732 2026-10-04T06:37:53.092586+00:00

When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP Headers:

: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.

 https://cve.radiocsirt.org/vuln/ghsa-mf92-479x-3373 GHSA-mf92-479x-3373 — Spring Security HTTP Headers Are not Written Under Some Conditions 2026-10-04T06:37:53.092610+00:00

Affected: Maven: org.springframework.security:spring-security-web

When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 NCSC-2026-0258 — Kwetsbaarheden verholpen in Oracle Financial Services 2026-10-04T06:37:53.092635+00:00 NCSC-2026-0258 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0797 WID-SEC-W-2026-0797 — VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T06:37:53.092665+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen und möglicherweise weitere Angriffe durchzuführen, beispielsweise zur Offenlegung vertraulicher Informationen.