https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:56:53.272867+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0674 certfr-2026-avi-0674 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-03T01:56:53.417476+00:00 certfr-2026-avi-0674 https://cve.radiocsirt.org/vuln/euvd-2026-321490 EUVD-2026-321490 2026-10-03T01:56:53.417526+00:00 EUVD-2026-321490 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41401 fkie_cve-2026-41401 2026-10-03T01:56:53.417541+00:00

libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.

 https://cve.radiocsirt.org/vuln/ghsa-v7jp-vmx6-5429 GHSA-v7jp-vmx6-5429 2026-10-03T01:56:53.417585+00:00

libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-41401 msrc_CVE-2026-41401 — libyang - Heap Use-After-Free Write in XML Metadata Parsing 2026-10-03T01:56:53.417625+00:00 msrc_CVE-2026-41401 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10868-1 openSUSE-SU-2026:10868-1 — libyang-devel-3.13.6-2.1 on GA media 2026-10-03T01:56:53.417656+00:00

libyang-devel-3.13.6-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22200-1 SUSE-SU-2026:22200-1 — Security update for libyang 2026-10-03T01:56:53.417672+00:00

Security update for libyang

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41401 UBUNTU-CVE-2026-41401 2026-10-03T01:56:53.417687+00:00

Affected: Ubuntu:20.04:LTS: libyang, Ubuntu:22.04:LTS: libyang, Ubuntu:25.10: libyang, Ubuntu:26.04:LTS: libyang

libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.