https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:29:52.508060+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-39827 BELL-CVE-2026-39827 2026-10-03T22:29:53.355346+00:00

Affected: Alpaquita:23: buildah, Alpaquita:23: containerd, Alpaquita:23: podman, Alpaquita:23: skopeo, Alpaquita:25: buildah, Alpaquita:25: containerd, Alpaquita:25: docker-cli-buildx, Alpaquita:25: google-guest-agent, Alpaquita:25: osv-scanner, Alpaquita:25: podman and 13 more

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0674 certfr-2026-avi-0674 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-03T22:29:53.355451+00:00 certfr-2026-avi-0674 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad30368 Withdrawn: CLEANSTART-2026-AD30368 — Security fixes for CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827, CVE-2… 2026-10-03T22:29:53.355472+00:00

Withdrawn by the publisher.

Affected: CleanStart: weaviate-fips

Multiple security vulnerabilities affect the weaviate-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-320155 EUVD-2026-320155 2026-10-03T22:29:53.355499+00:00 EUVD-2026-320155 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39827 fkie_cve-2026-39827 2026-10-03T22:29:53.355512+00:00

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for garbage collection.

 https://cve.radiocsirt.org/vuln/ghsa-qpw4-5x99-6vjp GHSA-qpw4-5x99-6vjp — golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS 2026-10-03T22:29:53.355536+00:00

Affected: Go: golang.org/x/crypto

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for garbage collection.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-39827 msrc_CVE-2026-39827 — Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 2026-10-03T22:29:53.355557+00:00 msrc_CVE-2026-39827 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10842-1 openSUSE-SU-2026:10842-1 — apptainer-1.4.5-5.1 on GA media 2026-10-03T22:29:53.355573+00:00

apptainer-1.4.5-5.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:37387 RHSA-2026:37387 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update 2026-10-03T22:29:53.355591+00:00

github.com/containerd/containerd: containerd local privilege escalation containerd: containerd has an integer overflow in User ID handling runc: runc can be tricked into creating empty files/directories on host noobaa-core: Excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container go-git: argument injection via the URL field go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects github.com/moby/moby: Moby's Firewalld reload removes bridge network isolation github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory github.com/containerd/containerd: containerd: Memory exhaustion via CRI Attach implementation goroutine leaks github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token fulcio: Fulcio: Server-Side Request Forgery (SSRF) via unanchored regex in MetaIssuer URL validation github.com/sigstore/rekor: Rekor denial of service github.com/sigstore/rekor: Rekor Server-Side Request Forgery (SSRF) golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution…

 https://cve.radiocsirt.org/vuln/suse-su-2026:22065-1 SUSE-SU-2026:22065-1 — Security update for elemental-toolkit 2026-10-03T22:29:53.355726+00:00

Security update for elemental-toolkit

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-39827 UBUNTU-CVE-2026-39827 2026-10-03T22:29:53.355752+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:16.04:LTS: google-guest-agent, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:18.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: snapd and 13 more

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for garbage collection.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1653 WID-SEC-W-2026-1653 — Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen 2026-10-03T22:29:53.355802+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.