https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:57:19.341820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1249 certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T18:57:19.401866+00:00 certfr-2026-avi-1249 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa85739 Withdrawn: CLEANSTART-2026-AA85739 — Security fixes in openbao-fips 2.2.2-r8 2026-10-03T18:57:19.401914+00:00

Withdrawn by the publisher.

Affected: CleanStart: openbao-fips

Package openbao-fips version 2.2.2-r8 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952

 https://cve.radiocsirt.org/vuln/euvd-2026-292915 EUVD-2026-292915 2026-10-03T18:57:19.401950+00:00 EUVD-2026-292915 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32952 fkie_cve-2026-32952 2026-10-03T18:57:19.401963+00:00

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.

 https://cve.radiocsirt.org/vuln/ghsa-pjcq-xvwq-hhpj GHSA-pjcq-xvwq-hhpj — go-ntlmssp NTLM challenges can panic on malformed payloads 2026-10-03T18:57:19.401985+00:00

Affected: Go: github.com/Azure/go-ntlmssp

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10672-1 openSUSE-SU-2026:10672-1 — cmctl-2.5.0-1.1 on GA media 2026-10-03T18:57:19.402005+00:00

cmctl-2.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32952 UBUNTU-CVE-2026-32952 2026-10-03T18:57:19.402023+00:00

Affected: Ubuntu:18.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:20.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:22.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:24.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:25.10: golang-github-azure-go-ntlmssp, Ubuntu:26.04:LTS: golang-github-azure-go-ntlmssp

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046 WID-SEC-W-2026-3046 — IBM Concert: Mehrere Schwachstellen 2026-10-03T18:57:19.402050+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.