https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:56:20.878731+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0744 certfr-2026-avi-0744 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Elles permettent à un attaquant de provoquer… 2026-10-03T21:56:20.882452+00:00 certfr-2026-avi-0744 https://cve.radiocsirt.org/vuln/euvd-2026-327400 EUVD-2026-327400 2026-10-03T21:56:20.882498+00:00 EUVD-2026-327400 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41708 fkie_cve-2026-41708 2026-10-03T21:56:20.882521+00:00

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.

Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.

 https://cve.radiocsirt.org/vuln/ghsa-26m2-9g2q-v45q GHSA-26m2-9g2q-v45q — Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability 2026-10-03T21:56:20.882578+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-sleuth-instrumentation

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.

Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1901 WID-SEC-W-2026-1901 — VMware Tanzu Spring Cloud Gateway Server und Sleuth: Mehrere Schwachstellen 2026-10-03T21:56:20.882627+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Cloud Gateway Server und Sleuth ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Daten zu manipulieren.