https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:20:15.857824+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10568 bdu:2026-10568 2026-10-03T07:20:16.166442+00:00 bdu:2026-10568 https://cve.radiocsirt.org/vuln/bit-zookeeper-2026-24308 BIT-zookeeper-2026-24308 — Apache ZooKeeper: Sensitive information disclosure in client configuration handling 2026-10-03T07:20:16.166484+00:00

Affected: Bitnami: zookeeper

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential production systems affected by the issue. Users are recommended to upgrade to version 3.8.6 or 3.9.5 which fixes this issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0251 certfr-2026-avi-0251 — De multiples vulnérabilités ont été découvertes dans Apache Zookeeper. Elles permettent à un attaquant de provoquer une… 2026-10-03T07:20:16.166522+00:00 certfr-2026-avi-0251 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj02810 Withdrawn: CLEANSTART-2026-AJ02810 — Security fixes in kserve-modelmesh 0.12.0-r0 2026-10-03T07:20:16.166541+00:00

Withdrawn by the publisher.

Affected: CleanStart: kserve-modelmesh

Package kserve-modelmesh version 0.12.0-r0 fixes 20 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2026-33870, CVE-2026-33871, ghsa-7xrh-hqfc-g7qr...

 https://cve.radiocsirt.org/vuln/euvd-2026-337764 EUVD-2026-337764 2026-10-03T07:20:16.166562+00:00 EUVD-2026-337764 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24308 fkie_cve-2026-24308 2026-10-03T07:20:16.166574+00:00

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential production systems affected by the issue. Users are recommended to upgrade to version 3.8.6 or 3.9.5 which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-crhr-qqj8-rpxc GHSA-crhr-qqj8-rpxc — Apache ZooKeeper has improper handling of configuration values 2026-10-03T07:20:16.166598+00:00

Affected: Maven: org.apache.zookeeper:zookeeper

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential production systems affected by the issue. Users are recommended to upgrade to version 3.8.6 or 3.9.5 which fixes this issue.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 NCSC-2026-0258 — Kwetsbaarheden verholpen in Oracle Financial Services 2026-10-03T07:20:16.166620+00:00 NCSC-2026-0258 https://cve.radiocsirt.org/vuln/rhsa-2026:10184 RHSA-2026:10184 — Red Hat Security Advisory: RHOAI 2.25.5 - Red Hat OpenShift AI 2026-10-03T07:20:16.166657+00:00

vllm: Server Side request forgery (SSRF) in MediaConnector feast: Feast: Remote Code Execution via insecure YAML deserialization openshift-ai: Trusty AI Grants All Authenticated users to list pods in any namespace nltk: Zip Slip Vulnerability in nltk Leading to Code Execution golang: net/url: Memory exhaustion in query parameter parsing in net/url golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion urllib3: urllib3 Streaming API improperly handles highly compressed data cbor2: cbor2: Information Disclosure via shared memory in CBORDecoder reuse aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb aiohttp: aiohttp: Denial of Service via specially crafted POST request aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request python-markdown: denial of service via malformed HTML-like sequences nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function nltk: NLTK: Arbitrary file read via path traversal vulnerability io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files google-cloud-aiplatform: google-cloud-aiplatform: Arbitrary code execution via Stored Cross-Site Scripting (XSS) tensorflow: TensorFlow: Local privilege escalation via…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24308 UBUNTU-CVE-2026-24308 2026-10-03T07:20:16.166750+00:00

Affected: Ubuntu:Pro:14.04:LTS: zookeeper, Ubuntu:Pro:16.04:LTS: zookeeper, Ubuntu:Pro:18.04:LTS: zookeeper, Ubuntu:20.04:LTS: zookeeper, Ubuntu:22.04:LTS: zookeeper, Ubuntu:24.04:LTS: zookeeper, Ubuntu:25.10: zookeeper, Ubuntu:26.04:LTS: zookeeper

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential production systems affected by the issue. Users are recommended to upgrade to version 3.8.6 or 3.9.5 which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1032 WID-SEC-W-2026-1032 — IBM Tivoli Network Manager: Mehrere Schwachstellen 2026-10-03T07:20:16.166784+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.