https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:29:13.137757+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0627 certfr-2026-avi-0627 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-02T19:29:13.143935+00:00 certfr-2026-avi-0627 https://cve.radiocsirt.org/vuln/euvd-2026-278594 EUVD-2026-278594 2026-10-02T19:29:13.143979+00:00 EUVD-2026-278594 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34872 fkie_cve-2026-34872 2026-10-02T19:29:13.143994+00:00

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).

 https://cve.radiocsirt.org/vuln/ghsa-347r-37hj-5jc9 GHSA-347r-37hj-5jc9 2026-10-02T19:29:13.144026+00:00

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34872 msrc_CVE-2026-34872 — An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributor… 2026-10-02T19:29:13.144044+00:00 msrc_CVE-2026-34872 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10498-1 openSUSE-SU-2026:10498-1 — libeverest-3.6.6-1.1 on GA media 2026-10-02T19:29:13.144063+00:00

libeverest-3.6.6-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34872 UBUNTU-CVE-2026-34872 2026-10-02T19:29:13.144081+00:00

Affected: Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls, Ubuntu:Pro:22.04:LTS: mbedtls, Ubuntu:Pro:24.04:LTS: mbedtls, Ubuntu:25.10: mbedtls, Ubuntu:26.04:LTS: mbedtls

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).