https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:02:50.727485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15304 bdu:2026-15304 2026-10-03T14:02:50.855732+00:00 bdu:2026-15304 https://cve.radiocsirt.org/vuln/cleanstart-2026-bp02821 Withdrawn: CLEANSTART-2026-BP02821 — Security fixes for CVE-2025-68121, CVE-2026-1229, CVE-2026-27145, CVE-2026-29181, CVE-2026-32952, CVE-2026-33811, CVE-2… 2026-10-03T14:02:50.855769+00:00

Withdrawn by the publisher.

Affected: CleanStart: rclone

Multiple security vulnerabilities affect the rclone package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-323002 EUVD-2026-323002 2026-10-03T14:02:50.855808+00:00 EUVD-2026-323002 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42500 fkie_cve-2026-42500 2026-10-03T14:02:50.855821+00:00

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

 https://cve.radiocsirt.org/vuln/ghsa-m6fh-wvw4-4629 GHSA-m6fh-wvw4-4629 2026-10-03T14:02:50.855843+00:00

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10856-1 openSUSE-SU-2026:10856-1 — rclone-1.74.2-1.1 on GA media 2026-10-03T14:02:50.855857+00:00

rclone-1.74.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:62391 RHSA-2026:62391 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T14:02:50.855889+00:00

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate golang.org/x/image/bmp: golang: golang.org/x/image/bmp: Denial of Service via out-of-range palette index in BMP decoding golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42500 UBUNTU-CVE-2026-42500 2026-10-03T14:02:50.855922+00:00

Affected: Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1653 WID-SEC-W-2026-1653 — Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen 2026-10-03T14:02:50.855948+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.