https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:16:28.578186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09573 bdu:2026-09573 2026-10-03T08:16:29.312544+00:00 bdu:2026-09573 https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-34515 BREW-aider-CVE-2026-34515 — AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows 2026-10-03T08:16:29.312586+00:00

Affected: Homebrew: aider

### Summary

On Windows the static resource handler may expose information about a NTLMv2 remote path.

### Impact

If an application is running on Windows, and using aiohttp's static resource handler (not recommended in production), then it may be possible for an attacker to extract the hash from an NTLMv2 path and then extract the user's credentials from there.

-----

Patch: https://github.com/aio-libs/aiohttp/commit/0ae2aa076c84573df83fc1fdc39eec0f5862fe3d

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0550 certfr-2026-avi-0550 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T08:16:29.312627+00:00 certfr-2026-avi-0550 https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 Withdrawn: CLEANSTART-2026-AN24336 — Security fixes for CVE-2024-12797, CVE-2024-52303, CVE-2024-52304, CVE-2024-56201, CVE-2024-56326, CVE-2025-24023, CVE-… 2026-10-03T08:16:29.312645+00:00

Withdrawn by the publisher.

Affected: CleanStart: airflow-2

Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-278794 EUVD-2026-278794 2026-10-03T08:16:29.312674+00:00 EUVD-2026-278794 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34515 fkie_cve-2026-34515 2026-10-03T08:16:29.312686+00:00

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, on Windows the static resource handler may expose information about a NTLMv2 remote path. This issue has been patched in version 3.13.4.

 https://cve.radiocsirt.org/vuln/ghsa-p998-jp59-783m GHSA-p998-jp59-783m — AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows 2026-10-03T08:16:29.312708+00:00

Affected: PyPI: aiohttp

### Summary

On Windows the static resource handler may expose information about a NTLMv2 remote path.

### Impact

If an application is running on Windows, and using aiohttp's static resource handler (not recommended in production), then it may be possible for an attacker to extract the hash from an NTLMv2 path and then extract the user's credentials from there.

-----

Patch: https://github.com/aio-libs/aiohttp/commit/0ae2aa076c84573df83fc1fdc39eec0f5862fe3d

 https://cve.radiocsirt.org/vuln/pysec-2026-2097 PYSEC-2026-2097 2026-10-03T08:16:29.312732+00:00

Affected: PyPI: aiohttp

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, on Windows the static resource handler may expose information about a NTLMv2 remote path. This issue has been patched in version 3.13.4.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34515 UBUNTU-CVE-2026-34515 2026-10-03T08:16:29.312750+00:00

Affected: Ubuntu:25.10: python-aiohttp

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, on Windows the static resource handler may expose information about a NTLMv2 remote path. This issue has been patched in version 3.13.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2933 WID-SEC-W-2026-2933 — Splunk SOAR: Mehrere Schwachstellen 2026-10-03T08:16:29.312811+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk SOAR ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.