https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:20:49.637522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323538 EUVD-2026-323538 2026-10-03T07:20:49.701045+00:00 EUVD-2026-323538 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4324 fkie_cve-2026-4324 2026-10-03T07:20:49.701084+00:00

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.

 https://cve.radiocsirt.org/vuln/ghsa-fwj4-6wgp-mpxm GHSA-fwj4-6wgp-mpxm — Katello: Denial of Service and potential information disclosure via SQL injection 2026-10-03T07:20:49.701117+00:00

Affected: RubyGems: katello

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.

 https://cve.radiocsirt.org/vuln/rhsa-2026:22326 RHSA-2026:22326 — Red Hat Security Advisory: Satellite 6.19.1 Async Update 2026-10-03T07:20:49.701143+00:00

rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 WID-SEC-W-2026-1007 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-03T07:20:49.701162+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.