https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:33:02.113572+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:20587 ALSA-2026:20587 — Moderate: glibc security update 2026-10-02T19:33:02.184166+00:00

Affected: AlmaLinux:8: compat-libpthread-nonshared, AlmaLinux:8: glibc, AlmaLinux:8: glibc-all-langpacks, AlmaLinux:8: glibc-benchtests, AlmaLinux:8: glibc-common, AlmaLinux:8: glibc-devel, AlmaLinux:8: glibc-doc, AlmaLinux:8: glibc-gconv-extra, AlmaLinux:8: glibc-headers, AlmaLinux:8: glibc-langpack-aa and 204 more

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-05928 bdu:2026-05928 2026-10-02T19:33:02.184443+00:00 bdu:2026-05928 https://cve.radiocsirt.org/vuln/bell-cve-2026-4046 BELL-CVE-2026-4046 2026-10-02T19:33:02.184462+00:00

Affected: Alpaquita:23: glibc, Alpaquita:25: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc

 https://cve.radiocsirt.org/vuln/brew-glibc-cve-2026-4046 BREW-glibc-CVE-2026-4046 — iconv crash due to assertion failure with untrusted input 2026-10-02T19:33:02.184485+00:00

Affected: Homebrew: glibc

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.

This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 certfr-2026-avi-0986 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:33:02.184508+00:00 certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/euvd-2026-336366 EUVD-2026-336366 2026-10-02T19:33:02.184523+00:00 EUVD-2026-336366 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4046 fkie_cve-2026-4046 2026-10-02T19:33:02.184540+00:00

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.

This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

 https://cve.radiocsirt.org/vuln/ghsa-g7c4-wv7q-gcc6 GHSA-g7c4-wv7q-gcc6 2026-10-02T19:33:02.184562+00:00

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.

This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4046 msrc_CVE-2026-4046 — iconv crash due to assertion failure with untrusted input 2026-10-02T19:33:02.184577+00:00 msrc_CVE-2026-4046 https://cve.radiocsirt.org/vuln/oesa-2026-2031 OESA-2026-2031 — glibc security update 2026-10-02T19:33:02.184593+00:00

Affected: openEuler:24.03-LTS-SP1: glibc

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es):

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.

This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.(CVE-2026-4046)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10722-1 openSUSE-SU-2026:10722-1 — glibc-2.43-2.1 on GA media 2026-10-02T19:33:02.184617+00:00

glibc-2.43-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:12740 RHSA-2026:12740 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T19:33:02.184633+00:00

glibc: glibc: Denial of Service via iconv() function with specific character sets glibc: glibc: Out-of-bounds write via TSIG record processing glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

 https://cve.radiocsirt.org/vuln/rlsa-2026:20594 RLSA-2026:20594 — Moderate: glibc security update 2026-10-02T19:33:02.184655+00:00

Affected: Rocky Linux:10: glibc

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ssa-082556 SSA-082556 — SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 2026-10-02T19:33:02.184677+00:00

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

 https://cve.radiocsirt.org/vuln/suse-su-2026:1498-1 SUSE-SU-2026:1498-1 — Security update for glibc-livepatches 2026-10-02T19:33:02.184840+00:00

Security update for glibc-livepatches

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4046 UBUNTU-CVE-2026-4046 2026-10-02T19:33:02.184855+00:00

Affected: Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:25.10: glibc, Ubuntu:26.04:LTS: glibc

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

 https://cve.radiocsirt.org/vuln/vde-2026-088 VDE-2026-088 — METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 2026-10-02T19:33:02.184883+00:00

The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.

The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25

All other vulnerabilities are to be fixed in the upcoming releases.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0918 WID-SEC-W-2026-0918 — GNU libc: Schwachstelle ermöglicht Denial of Service 2026-10-02T19:33:02.184924+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GNU libc ausnutzen, um einen Denial of Service Angriff durchzuführen.