https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:47:42.796468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-04241 bdu:2026-04241 2026-10-03T19:47:42.867767+00:00 bdu:2026-04241 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0343 certfr-2026-avi-0343 — Une vulnérabilité a été découverte dans Spring Cloud Config. Elle permet à un attaquant de provoquer une falsification… 2026-10-03T19:47:42.867809+00:00 certfr-2026-avi-0343 https://cve.radiocsirt.org/vuln/euvd-2026-277165 EUVD-2026-277165 2026-10-03T19:47:42.867829+00:00 EUVD-2026-277165 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22739 fkie_cve-2026-22739 2026-10-03T19:47:42.867842+00:00

Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-3qwq-q9vm-5j42 GHSA-3qwq-q9vm-5j42 — Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access 2026-10-03T19:47:42.867873+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-config-server

Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0829 WID-SEC-W-2026-0829 — VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T19:47:42.867901+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um Informationen offenzulegen.