https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:38:08.306709+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08941 bdu:2026-08941 2026-10-03T21:38:08.414967+00:00 bdu:2026-08941 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 certfr-2026-avi-0986 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T21:38:08.415007+00:00 certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/cleanstart-2026-cq01177 Withdrawn: CLEANSTART-2026-CQ01177 — Security fixes for CVE-2024-38828, CVE-2024-6763, CVE-2025-11143, CVE-2026-2332, CVE-2026-34477, CVE-2026-34478, CVE-20… 2026-10-03T21:38:08.415025+00:00

Withdrawn by the publisher.

Affected: CleanStart: activemq

Multiple security vulnerabilities affect the activemq package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2026-26205 cnvd-2026-26205 2026-10-03T21:38:08.415056+00:00 cnvd-2026-26205 https://cve.radiocsirt.org/vuln/euvd-2026-328271 EUVD-2026-328271 2026-10-03T21:38:08.415069+00:00 EUVD-2026-328271 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49268 fkie_cve-2026-49268 2026-10-03T21:38:08.415079+00:00

A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. This allows an attacker to manipulate the DN structure used for LDAP bind authentication, potentially bypassing authentication or impersonating other users.

This issue affects all Apache Shiro versions through 2.2.0, and 3.0.0-alpha-1 when using DefaultLdapRealm Upgrade to Apache Shiro 2.2.1 or 3.0.0-alpha-2 or later, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-x96m-rh44-vgv8 GHSA-x96m-rh44-vgv8 — Apache Shiro: LDAP DN Injection in DefaultLdapRealm 2026-10-03T21:38:08.415104+00:00

Affected: Maven: org.apache.shiro:shiro-core

A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. This allows an attacker to manipulate the DN structure used for LDAP bind authentication, potentially bypassing authentication or impersonating other users.

This issue affects all Apache Shiro versions through 2.2.0, and 3.0.0-alpha-1 when using DefaultLdapRealm Upgrade to Apache Shiro 2.2.1 or 3.0.0-alpha-2 or later, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49268 UBUNTU-CVE-2026-49268 2026-10-03T21:38:08.415128+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro, Ubuntu:Pro:24.04:LTS: shiro, Ubuntu:25.10: shiro, Ubuntu:26.04:LTS: shiro

A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. This allows an attacker to manipulate the DN structure used for LDAP bind authentication, potentially bypassing authentication or impersonating other users. This issue affects all Apache Shiro versions through 2.2.0, and 3.0.0-alpha-1 when using DefaultLdapRealm Upgrade to Apache Shiro 2.2.1 or 3.0.0-alpha-2 or later, which fixes the issue.