https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:13:16.070039+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0705 certfr-2026-avi-0705 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-03T19:13:16.129154+00:00 certfr-2026-avi-0705 https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 Withdrawn: CLEANSTART-2026-AM39668 — yawkat LZ4 Java provides LZ4 compression for Java 2026-10-03T19:13:16.129197+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-329710 EUVD-2026-329710 2026-10-03T19:13:16.129229+00:00 EUVD-2026-329710 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41715 fkie_cve-2026-41715 2026-10-03T19:13:16.129243+00:00

In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.

Affected versions: Reactor Netty 1.0.0 through 1.0.51; 1.1.0 through 1.1.35; 1.2.0 through 1.2.17; 1.3.0 through 1.3.5.

 https://cve.radiocsirt.org/vuln/ghsa-pfc9-2cqg-9wq6 GHSA-pfc9-2cqg-9wq6 — Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect 2026-10-03T19:13:16.129266+00:00

Affected: Maven: io.projectreactor.netty:reactor-netty

In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.

Affected versions: Reactor Netty 1.0.0 through 1.0.51; 1.1.0 through 1.1.35; 1.2.0 through 1.2.17; 1.3.0 through 1.3.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2260 WID-SEC-W-2026-2260 — IBM Operational Decision Manager: Mehrere Schwachstellen 2026-10-03T19:13:16.129289+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Operational Decision Manager ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.