https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:38:51.507041+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-thrift-2026-43869 BIT-thrift-2026-43869 — Apache Thrift: TSSLTransportFactory.java hostname verification 2026-10-02T13:38:51.740463+00:00

Affected: Bitnami: thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0991 certfr-2026-avi-0991 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu Greenplum. Elles permettent à un attaquant de provoqu… 2026-10-02T13:38:51.740541+00:00 certfr-2026-avi-0991 https://cve.radiocsirt.org/vuln/cleanstart-2026-cf06415 Withdrawn: CLEANSTART-2026-CF06415 — Security fixes in apache-hive 4.2.0-r7 2026-10-02T13:38:51.740562+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-hive

Package apache-hive version 4.2.0-r7 fixes 8 vulnerabilities: CVE-2025-52999, CVE-2025-49128, CVE-2026-43869, ghsa-72hv-8253-57qq, ghsa-5jmj-h7xm-6q6v...

 https://cve.radiocsirt.org/vuln/euvd-2026-365492 EUVD-2026-365492 2026-10-02T13:38:51.740585+00:00 EUVD-2026-365492 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43869 fkie_cve-2026-43869 2026-10-02T13:38:51.740598+00:00

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-7pwc-h2j2-rjgj GHSA-7pwc-h2j2-rjgj — Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability 2026-10-02T13:38:51.740621+00:00

Affected: Maven: org.apache.thrift:libthrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version [0.23.0](https://github.com/apache/thrift/releases/tag/v0.23.0), which fixes the issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-43869 msrc_CVE-2026-43869 — Apache Thrift: TSSLTransportFactory.java hostname verification 2026-10-02T13:38:51.740644+00:00 msrc_CVE-2026-43869 https://cve.radiocsirt.org/vuln/rhsa-2026:21769 RHSA-2026:21769 — Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update 2026-10-02T13:38:51.740660+00:00

grafana/tempo: Tempo: Denial of Service via large queries net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via mal…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43869 UBUNTU-CVE-2026-43869 2026-10-02T13:38:51.740735+00:00

Affected: Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3043 WID-SEC-W-2026-3043 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T13:38:51.740763+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.