https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:42:10.669127+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0719 certfr-2026-avi-0719 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-03T22:42:10.723073+00:00 certfr-2026-avi-0719 https://cve.radiocsirt.org/vuln/euvd-2026-330900 EUVD-2026-330900 2026-10-03T22:42:10.723123+00:00 EUVD-2026-330900 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40993 fkie_cve-2026-40993 2026-10-03T22:42:10.723145+00:00

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).

Affected versions: Spring Security 7.0.0 through 7.0.5.

 https://cve.radiocsirt.org/vuln/ghsa-2q7c-5gjm-7q23 GHSA-2q7c-5gjm-7q23 — Spring Security SAML2 Service Provider is vulnerable to Deserialization of Untrusted Data via JdbcAssertingPartyMetadat… 2026-10-03T22:42:10.723192+00:00

Affected: Maven: org.springframework.security:spring-security-saml2-service-provider

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).

Affected versions: Spring Security 7.0.0 through 7.0.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1869 WID-SEC-W-2026-1869 — VMware Tanzu Spring Security: Mehrere Schwachstellen 2026-10-03T22:42:10.723256+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um einen Denial of Service zu verursachen, beliebigen Code auszuführen, Benutzer auf beliebige Websites umzuleiten, Informationen offenzulegen und die Identität eines anderen Benutzers anzunehmen.