https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:13:01.086868+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 certfr-2026-avi-0986 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T17:13:01.497480+00:00 certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 Withdrawn: CLEANSTART-2026-AM39668 — yawkat LZ4 Java provides LZ4 compression for Java 2026-10-04T17:13:01.497539+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2026-28236 cnvd-2026-28236 2026-10-04T17:13:01.497575+00:00 cnvd-2026-28236 https://cve.radiocsirt.org/vuln/euvd-2026-331958 EUVD-2026-331958 2026-10-04T17:13:01.497590+00:00 EUVD-2026-331958 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54428 fkie_cve-2026-54428 2026-10-04T17:13:01.497611+00:00

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending oversized compressed header blocks before the HTTP/2 SETTINGS acknowledgement causes the configured header list size limit to be applied.

 https://cve.radiocsirt.org/vuln/ghsa-v3jc-474w-2wm6 GHSA-v3jc-474w-2wm6 — Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK 2026-10-04T17:13:01.497644+00:00

Affected: Maven: org.apache.httpcomponents.core5:httpcore5-h2

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending oversized compressed header blocks before the HTTP/2 SETTINGS acknowledgement causes the configured header list size limit to be applied.

 https://cve.radiocsirt.org/vuln/rhsa-2026:47172 RHSA-2026:47172 — Red Hat Security Advisory: Red Hat build of Quarkus 3.33.2.SP3 security update 2026-10-04T17:13:01.497667+00:00

vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) io.netty/netty-codec-http2: Netty: Improper header neutrali…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54428 UBUNTU-CVE-2026-54428 2026-10-04T17:13:01.497714+00:00

Affected: Ubuntu:14.04:LTS: httpcomponents-core, Ubuntu:16.04:LTS: httpcomponents-core, Ubuntu:18.04:LTS: httpcomponents-core, Ubuntu:20.04:LTS: httpcomponents-core, Ubuntu:22.04:LTS: httpcomponents-core, Ubuntu:22.04:LTS: httpcomponents-core5, Ubuntu:24.04:LTS: httpcomponents-core, Ubuntu:24.04:LTS: httpcomponents-core5, Ubuntu:25.10: httpcomponents-core, Ubuntu:25.10: httpcomponents-core5 and 2 more

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending oversized compressed header blocks before the HTTP/2 SETTINGS acknowledgement causes the configured header list size limit to be applied.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2172 WID-SEC-W-2026-2172 — Apache HttpComponents Core: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T17:13:01.497751+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HttpComponents Core ausnutzen, um einen Denial of Service Angriff durchzuführen.