https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:26:07.662550+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11949 bdu:2026-11949 2026-10-03T15:26:08.178680+00:00 bdu:2026-11949 https://cve.radiocsirt.org/vuln/bell-cve-2026-39834 BELL-CVE-2026-39834 2026-10-03T15:26:08.178741+00:00

Affected: Alpaquita:23: buildah, Alpaquita:23: containerd, Alpaquita:23: podman, Alpaquita:23: skopeo, Alpaquita:25: buildah, Alpaquita:25: containerd, Alpaquita:25: docker-cli-buildx, Alpaquita:25: google-guest-agent, Alpaquita:25: osv-scanner, Alpaquita:25: podman and 13 more

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0901 certfr-2026-avi-0901 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T15:26:08.178809+00:00 certfr-2026-avi-0901 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad30368 Withdrawn: CLEANSTART-2026-AD30368 — Security fixes for CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827, CVE-2… 2026-10-03T15:26:08.178828+00:00

Withdrawn by the publisher.

Affected: CleanStart: weaviate-fips

Multiple security vulnerabilities affect the weaviate-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-320160 EUVD-2026-320160 2026-10-03T15:26:08.178854+00:00 EUVD-2026-320160 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39834 fkie_cve-2026-39834 2026-10-03T15:26:08.178866+00:00

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

 https://cve.radiocsirt.org/vuln/ghsa-rm3j-f69w-wqmq GHSA-rm3j-f69w-wqmq — golang.org/x/crypto vulnerable to infinite loop on large channel writes 2026-10-03T15:26:08.178888+00:00

Affected: Go: golang.org/x/crypto

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-39834 msrc_CVE-2026-39834 — Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 2026-10-03T15:26:08.178907+00:00 msrc_CVE-2026-39834 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10843-1 openSUSE-SU-2026:10843-1 — hauler-1.4.3-3.1 on GA media 2026-10-03T15:26:08.178924+00:00

hauler-1.4.3-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:37387 RHSA-2026:37387 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update 2026-10-03T15:26:08.178941+00:00

github.com/containerd/containerd: containerd local privilege escalation containerd: containerd has an integer overflow in User ID handling runc: runc can be tricked into creating empty files/directories on host noobaa-core: Excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container go-git: argument injection via the URL field go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects github.com/moby/moby: Moby's Firewalld reload removes bridge network isolation github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory github.com/containerd/containerd: containerd: Memory exhaustion via CRI Attach implementation goroutine leaks github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token fulcio: Fulcio: Server-Side Request Forgery (SSRF) via unanchored regex in MetaIssuer URL validation github.com/sigstore/rekor: Rekor denial of service github.com/sigstore/rekor: Rekor Server-Side Request Forgery (SSRF) golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution…

 https://cve.radiocsirt.org/vuln/suse-su-2026:22065-1 SUSE-SU-2026:22065-1 — Security update for elemental-toolkit 2026-10-03T15:26:08.179029+00:00

Security update for elemental-toolkit

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-39834 UBUNTU-CVE-2026-39834 2026-10-03T15:26:08.179052+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:16.04:LTS: google-guest-agent, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:18.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: snapd and 13 more

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1653 WID-SEC-W-2026-1653 — Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen 2026-10-03T15:26:08.179099+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.