https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:09:11.003013+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T08:09:11.080356+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-yw87633 CLEANSTART-2026-YW87633 — Security fix for CVE-2026-43827 applied in: activemq 6.1.8-r1, cassandra-reaper-fips 3.8.0-r9 2026-10-03T08:09:11.080402+00:00

Affected: CleanStart: activemq, CleanStart: cassandra-reaper-fips

CVE-2026-43827 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-321271 EUVD-2026-321271 2026-10-03T08:09:11.080439+00:00 EUVD-2026-321271 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43827 fkie_cve-2026-43827 2026-10-03T08:09:11.080453+00:00

Default configurations of Apache Shiro have a session fixation vulnerability.

This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.

Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.

In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.

 https://cve.radiocsirt.org/vuln/ghsa-fcvm-3cpj-f9qx GHSA-fcvm-3cpj-f9qx — Apache Shiro has a session fixation vulnerability 2026-10-03T08:09:11.080480+00:00

Affected: Maven: org.apache.shiro:shiro-core

Default configurations of Apache Shiro have a session fixation vulnerability.

This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.

Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.

In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43827 UBUNTU-CVE-2026-43827 2026-10-03T08:09:11.080506+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro, Ubuntu:Pro:24.04:LTS: shiro, Ubuntu:25.10: shiro, Ubuntu:26.04:LTS: shiro

Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.