https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:44:01.206709+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-3184 BELL-CVE-2026-3184 2026-10-02T18:44:01.615869+00:00

Affected: Alpaquita:23: util-linux, Alpaquita:25: util-linux, Alpaquita:stream: util-linux, BellSoft Hardened Containers:23: util-linux, BellSoft Hardened Containers:25: util-linux, BellSoft Hardened Containers:stream: util-linux

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0435 certfr-2026-avi-0435 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-02T18:44:01.615929+00:00 certfr-2026-avi-0435 https://cve.radiocsirt.org/vuln/euvd-2026-361743 EUVD-2026-361743 2026-10-02T18:44:01.615949+00:00 EUVD-2026-361743 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3184 fkie_cve-2026-3184 2026-10-02T18:44:01.615962+00:00

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

 https://cve.radiocsirt.org/vuln/ghsa-qp7r-5rpf-pwxg GHSA-qp7r-5rpf-pwxg 2026-10-02T18:44:01.615988+00:00

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3184 msrc_CVE-2026-3184 — Util-linux: util-linux: access control bypass due to improper hostname canonicalization 2026-10-02T18:44:01.616005+00:00 msrc_CVE-2026-3184 https://cve.radiocsirt.org/vuln/oesa-2026-1532 OESA-2026-1532 — util-linux security update 2026-10-02T18:44:01.616021+00:00

Affected: openEuler:24.03-LTS: util-linux

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):

A vulnerability exists in util-linux package that allows access control bypass due to improper hostname canonicalization.(CVE-2026-3184)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10288-1 openSUSE-SU-2026:10288-1 — libblkid-devel-2.41.3-4.1 on GA media 2026-10-02T18:44:01.616042+00:00

libblkid-devel-2.41.3-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:7180 RHSA-2026:7180 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T18:44:01.616058+00:00

util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames util-linux: util-linux: Access control bypass due to improper hostname canonicalization util-linux: TOCTOU in the mount program when setting up loop devices

 https://cve.radiocsirt.org/vuln/suse-su-2026:0803-1 SUSE-SU-2026:0803-1 — Security update for util-linux 2026-10-02T18:44:01.616078+00:00

Security update for util-linux

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3184 UBUNTU-CVE-2026-3184 2026-10-02T18:44:01.616092+00:00

Affected: Ubuntu:25.10: util-linux, Ubuntu:26.04:LTS: util-linux

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0507 WID-SEC-W-2026-0507 — util-linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T18:44:01.616113+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in util-linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.