https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:47:31.086660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1256 certfr-2026-avi-1256 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T17:47:31.155277+00:00 certfr-2026-avi-1256 https://cve.radiocsirt.org/vuln/euvd-2026-330113 EUVD-2026-330113 2026-10-03T17:47:31.155333+00:00 EUVD-2026-330113 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56130 fkie_cve-2026-56130 2026-10-03T17:47:31.155348+00:00

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled.

Upgrade to version 3.0.0 or later, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-m8g6-vrr2-x7ff GHSA-m8g6-vrr2-x7ff 2026-10-03T17:47:31.155383+00:00

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled.

Upgrade to version 3.0.0 or later, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56130 UBUNTU-CVE-2026-56130 2026-10-03T17:47:31.155402+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro, Ubuntu:Pro:24.04:LTS: shiro, Ubuntu:25.10: shiro, Ubuntu:26.04:LTS: shiro

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled. Upgrade to version 3.0.0 or later, which fixes the issue.