https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:42:21.648485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11950 bdu:2026-11950 2026-10-02T18:42:22.050723+00:00 bdu:2026-11950 https://cve.radiocsirt.org/vuln/bell-cve-2026-39833 BELL-CVE-2026-39833 2026-10-02T18:42:22.050780+00:00

Affected: Alpaquita:23: buildah, Alpaquita:23: containerd, Alpaquita:23: podman, Alpaquita:23: skopeo, Alpaquita:25: buildah, Alpaquita:25: containerd, Alpaquita:25: docker-cli-buildx, Alpaquita:25: google-guest-agent, Alpaquita:25: osv-scanner, Alpaquita:25: podman and 13 more

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0731 certfr-2026-avi-0731 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at… 2026-10-02T18:42:22.050837+00:00 certfr-2026-avi-0731 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad30368 Withdrawn: CLEANSTART-2026-AD30368 — Security fixes for CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827, CVE-2… 2026-10-02T18:42:22.050855+00:00

Withdrawn by the publisher.

Affected: CleanStart: weaviate-fips

Multiple security vulnerabilities affect the weaviate-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-351325 EUVD-2026-351325 2026-10-02T18:42:22.050882+00:00 EUVD-2026-351325 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39833 fkie_cve-2026-39833 2026-10-02T18:42:22.050893+00:00

The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.

 https://cve.radiocsirt.org/vuln/ghsa-jppx-rxg9-jmrx GHSA-jppx-rxg9-jmrx — golang.org/x/crypto doesn't enforce invoking key constraints 2026-10-02T18:42:22.050915+00:00

Affected: Go: golang.org/x/crypto

The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-39833 msrc_CVE-2026-39833 — Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 2026-10-02T18:42:22.050935+00:00 msrc_CVE-2026-39833 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10856-1 openSUSE-SU-2026:10856-1 — rclone-1.74.2-1.1 on GA media 2026-10-02T18:42:22.050951+00:00

rclone-1.74.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:36648 RHSA-2026:36648 — Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.4 2026-10-02T18:42:22.050979+00:00

openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

 https://cve.radiocsirt.org/vuln/suse-su-2026:22065-1 SUSE-SU-2026:22065-1 — Security update for elemental-toolkit 2026-10-02T18:42:22.051016+00:00

Security update for elemental-toolkit

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-39833 UBUNTU-CVE-2026-39833 2026-10-02T18:42:22.051039+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:20.04:LTS: snapd, Ubuntu:Pro:20.04:LTS: golang-go.crypto, Ubuntu:22.04:LTS: snapd, Ubuntu:Pro:22.04:LTS: golang-go.crypto and 6 more

The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1653 WID-SEC-W-2026-1653 — Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen 2026-10-02T18:42:22.051076+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.