https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:28:52.149665+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0274 certfr-2026-avi-0274 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at… 2026-10-04T16:28:52.238290+00:00 certfr-2026-avi-0274 https://cve.radiocsirt.org/vuln/cnvd-2026-12909 cnvd-2026-12909 2026-10-04T16:28:52.238358+00:00 cnvd-2026-12909 https://cve.radiocsirt.org/vuln/euvd-2026-270860 EUVD-2026-270860 2026-10-04T16:28:52.238375+00:00 EUVD-2026-270860 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26030 fkie_cve-2026-26030 2026-10-04T16:28:52.238387+00:00

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios.

 https://cve.radiocsirt.org/vuln/ghsa-xjw9-4gw8-4rqx GHSA-xjw9-4gw8-4rqx — Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution 2026-10-04T16:28:52.238418+00:00

Affected: PyPI: semantic-kernel

### Impact: An RCE vulnerability has been identified in Microsoft Semantic Kernel Python SDK, specifically within the `InMemoryVectorStore` filter functionality.

### Patches: The problem has been fixed in [python-1.39.4](https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4). Users should upgrade this version or higher.

### Workarounds: Avoid using `InMemoryVectorStore` for production scenarios.

### References: [Release python-1.39.4 · microsoft/semantic-kernel · GitHub](https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4) [PR to block use of dangerous attribute names that must not be accessed in filter expressions](https://github.com/microsoft/semantic-kernel/pull/13505)

 https://cve.radiocsirt.org/vuln/pysec-2026-163 PYSEC-2026-163 2026-10-04T16:28:52.238449+00:00

Affected: PyPI: semantic-kernel

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios.