https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:18:38.810660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0323 certfr-2026-avi-0323 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-03T18:18:38.921253+00:00 certfr-2026-avi-0323 https://cve.radiocsirt.org/vuln/cleanstart-2026-bv41278 Withdrawn: CLEANSTART-2026-BV41278 — Security fixes in kafka-ui 1.3.0-r2 2026-10-03T18:18:38.921335+00:00

Withdrawn by the publisher.

Affected: CleanStart: kafka-ui

Package kafka-ui version 1.3.0-r2 fixes 13 vulnerabilities: ghsa-w9fj-cfpg-grvv, ghsa-4773-3jfm-qmx3, ghsa-pwqr-wmgm-9rr8, ghsa-mf92-479x-3373, ghsa-6hcq-hmm3-jj3c...

 https://cve.radiocsirt.org/vuln/euvd-2026-276652 EUVD-2026-276652 2026-10-03T18:18:38.921368+00:00 EUVD-2026-276652 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22737 fkie_cve-2026-22737 2026-10-03T18:18:38.921382+00:00

Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.

 https://cve.radiocsirt.org/vuln/ghsa-4773-3jfm-qmx3 GHSA-4773-3jfm-qmx3 — Spring Framework Improper Path Limitation with Script View Templates 2026-10-03T18:18:38.921406+00:00

Affected: Maven: org.springframework:spring-webmvc, Maven: org.springframework:spring-webflux

Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22737 UBUNTU-CVE-2026-22737 2026-10-03T18:18:38.921434+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0796 WID-SEC-W-2026-0796 — VMware Tanzu Spring Framework (MVC and WebFlux): Mehrere Schwachstellen 2026-10-03T18:18:38.921464+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.