https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:34:11.547430+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0627 certfr-2026-avi-0627 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-02T19:34:11.551901+00:00 certfr-2026-avi-0627 https://cve.radiocsirt.org/vuln/euvd-2026-278845 EUVD-2026-278845 2026-10-02T19:34:11.551937+00:00 EUVD-2026-278845 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34877 fkie_cve-2026-34877 2026-10-02T19:34:11.551952+00:00

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

 https://cve.radiocsirt.org/vuln/ghsa-xg3m-c464-j5fh GHSA-xg3m-c464-j5fh 2026-10-02T19:34:11.551979+00:00

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10498-1 openSUSE-SU-2026:10498-1 — libeverest-3.6.6-1.1 on GA media 2026-10-02T19:34:11.551996+00:00

libeverest-3.6.6-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34877 UBUNTU-CVE-2026-34877 2026-10-02T19:34:11.552014+00:00

Affected: Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls, Ubuntu:Pro:22.04:LTS: mbedtls, Ubuntu:Pro:24.04:LTS: mbedtls, Ubuntu:25.10: mbedtls, Ubuntu:26.04:LTS: mbedtls

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.