https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:32:11.423398+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10868 bdu:2026-10868 2026-10-03T05:32:12.260732+00:00 bdu:2026-10868 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0810 certfr-2026-avi-0810 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T05:32:12.260798+00:00 certfr-2026-avi-0810 https://cve.radiocsirt.org/vuln/cleanstart-2026-av84730 Withdrawn: CLEANSTART-2026-AV84730 — Security fixes for CVE-2026-1605, CVE-2026-22732, CVE-2026-24281, CVE-2026-33870, CVE-2026-33871, CVE-2026-3505, CVE-20… 2026-10-03T05:32:12.260820+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-371791 EUVD-2026-371791 2026-10-03T05:32:12.260855+00:00 EUVD-2026-371791 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5588 fkie_cve-2026-5588 2026-10-03T05:32:12.260868+00:00

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules).

This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java.

This issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11.

 https://cve.radiocsirt.org/vuln/ghsa-wg6q-6289-32hp GHSA-wg6q-6289-32hp — Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules 2026-10-03T05:32:12.260896+00:00

Affected: Maven: org.bouncycastle:bcpkix-jdk18on, Maven: org.bouncycastle:bcpkix-jdk15to18, Maven: org.bouncycastle:bcpkix-jdk15on, Maven: org.bouncycastle:bcpkix-jdk14, Maven: org.bouncycastle:bcpkix-debug-jdk18on, Maven: org.bouncycastle:bcpkix-debug-jdk15to18, Maven: org.bouncycastle:bcpkix-debug-jdk14

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules).

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

This issue affects BC-JAVA: from 1.49 before 1.84.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10571-1 openSUSE-SU-2026:10571-1 — bouncycastle-1.84-1.1 on GA media 2026-10-03T05:32:12.260929+00:00

bouncycastle-1.84-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:11720 RHSA-2026:11720 — Red Hat Security Advisory: Red Hat build of Quarkus 3.20.6.SP1 security update 2026-10-03T05:32:12.260950+00:00

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests

 https://cve.radiocsirt.org/vuln/suse-su-2026:21404-1 SUSE-SU-2026:21404-1 — Security update for bouncycastle 2026-10-03T05:32:12.260971+00:00

Security update for bouncycastle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5588 UBUNTU-CVE-2026-5588 2026-10-03T05:32:12.260988+00:00

Affected: Ubuntu:Pro:16.04:LTS: bouncycastle, Ubuntu:Pro:18.04:LTS: bouncycastle, Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle, Ubuntu:25.10: bouncycastle, Ubuntu:26.04:LTS: bouncycastle

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules). This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java. This issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1129 WID-SEC-W-2026-1129 — Bouncy Castle BC-JAVA: Mehrere Schwachstellen 2026-10-03T05:32:12.261018+00:00

Ein Angreifer kann mehrere Schwachstellen in Bouncy Castle BC-JAVA ausnutzen, um kryptografische Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.