https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:48:07.165003+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2026-34509 fkie_cve-2026-34509 2026-10-07T05:48:07.205062+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

 https://cve.radiocsirt.org/vuln/ghsa-hwf5-6844-rpxj GHSA-hwf5-6844-rpxj 2026-10-07T05:48:07.205116+00:00

OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks. When a team/channel route allowlist is configured with an empty groupAllowFrom parameter, the message handler synthesizes wildcard sender authorization, permitting any sender in the matched team/channel to trigger replies in allowlisted Teams routes.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0691 WID-SEC-W-2026-0691 — OpenClaw: Mehrere Schwachstellen 2026-10-07T05:48:07.205136+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder andere, nicht näher spezifizerte Angriffe durchzuführen.