https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:18:58.249218+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372978 EUVD-2026-372978 2026-10-03T03:18:58.660282+00:00 EUVD-2026-372978 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50236 fkie_cve-2026-50236 2026-10-03T03:18:58.660356+00:00

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

 https://cve.radiocsirt.org/vuln/ghsa-c4v8-c9cj-xrmr GHSA-c4v8-c9cj-xrmr 2026-10-03T03:18:58.660397+00:00

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

 https://cve.radiocsirt.org/vuln/rhsa-2026:54545 RHSA-2026:54545 — Red Hat Security Advisory: OpenShift Container Platform 4.18.53 bug fix and security update 2026-10-03T03:18:58.660416+00:00

openshift/console: Authenticated SSRF with full response reflection and path neutralization via Dev Console webhook helpers in OpenShift Console openshift/console: Namespace tenant SSRF with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via ProjectHelmChartRepository in OpenShift Console