https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:16:16.818167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08963 bdu:2026-08963 2026-10-02T21:16:16.885493+00:00 bdu:2026-08963 https://cve.radiocsirt.org/vuln/bit-vault-2026-5052 BIT-vault-2026-5052 — Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS 2026-10-02T21:16:16.885529+00:00

Affected: Bitnami: vault

Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

 https://cve.radiocsirt.org/vuln/euvd-2026-291833 EUVD-2026-291833 2026-10-02T21:16:16.885568+00:00 EUVD-2026-291833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5052 fkie_cve-2026-5052 2026-10-02T21:16:16.885582+00:00

Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

 https://cve.radiocsirt.org/vuln/ghsa-8r5m-3f66-qpr3 GHSA-8r5m-3f66-qpr3 — HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS 2026-10-02T21:16:16.885606+00:00

Affected: Go: github.com/hashicorp/vault

Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164 WID-SEC-W-2026-1164 — Hashicorp Vault Community Edition und Enterprise: Mehrere Schwachstellen 2026-10-02T21:16:16.885627+00:00

Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.