https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:35:41.080950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-41080 BELL-CVE-2026-41080 2026-10-04T06:35:41.109114+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

 https://cve.radiocsirt.org/vuln/cleanstart-2026-ct53141 Withdrawn: CLEANSTART-2026-CT53141 — Security fixes in ingress-nginx-controller-1.14 1.14.5-r2 2026-10-04T06:35:41.109194+00:00

Withdrawn by the publisher.

Affected: CleanStart: ingress-nginx-controller-1.14

Package ingress-nginx-controller-1.14 version 1.14.5-r2 fixes 2 vulnerabilities: CVE-2026-45186, CVE-2026-41080

 https://cve.radiocsirt.org/vuln/euvd-2026-336386 EUVD-2026-336386 2026-10-04T06:35:41.109234+00:00 EUVD-2026-336386 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41080 fkie_cve-2026-41080 2026-10-04T06:35:41.109254+00:00

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

 https://cve.radiocsirt.org/vuln/ghsa-fpqv-cr66-h6pc GHSA-fpqv-cr66-h6pc 2026-10-04T06:35:41.109287+00:00

libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-41080 msrc_CVE-2026-41080 — CVE-2026-41080 2026-10-04T06:35:41.109310+00:00 msrc_CVE-2026-41080 https://cve.radiocsirt.org/vuln/oesa-2026-2293 OESA-2026-2293 — expat security update 2026-10-04T06:35:41.109335+00:00

Affected: openEuler:24.03-LTS: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.(CVE-2026-41080)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10787-1 openSUSE-SU-2026:10787-1 — expat-2.8.1-1.1 on GA media 2026-10-04T06:35:41.109371+00:00

expat-2.8.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:11004 RHSA-2026:11004 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T06:35:41.109402+00:00

libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

 https://cve.radiocsirt.org/vuln/ssa-082556 SSA-082556 — SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 2026-10-04T06:35:41.109420+00:00

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

 https://cve.radiocsirt.org/vuln/suse-su-2026:23894-1 SUSE-SU-2026:23894-1 — Security update for expat 2026-10-04T06:35:41.109546+00:00

Security update for expat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41080 UBUNTU-CVE-2026-41080 2026-10-04T06:35:41.109565+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1159 WID-SEC-W-2026-1159 — expat: Schwachstelle ermöglicht Denial of Service 2026-10-04T06:35:41.109638+00:00

Ein lokaler Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.