https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:10:33.292760+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-26085 cnvd-2026-26085 2026-10-02T20:10:33.363000+00:00 cnvd-2026-26085 https://cve.radiocsirt.org/vuln/euvd-2026-343628 EUVD-2026-343628 2026-10-02T20:10:33.363038+00:00 EUVD-2026-343628 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57915 fkie_cve-2026-57915 2026-10-02T20:10:33.363053+00:00

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-262p-fj3f-xh7v GHSA-262p-fj3f-xh7v 2026-10-02T20:10:33.363083+00:00

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

 https://cve.radiocsirt.org/vuln/rhsa-2026:69459 RHSA-2026:69459 — Red Hat Security Advisory: AMQ Clients 2026.Q3 2026-10-02T20:10:33.363100+00:00

Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values Spring Boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure. micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake netty-handler: Netty: Improper trust manager handling leads to hostname ver…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2801 WID-SEC-W-2026-2801 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-02T20:10:33.363168+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.