https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:05:14.981795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08979 bdu:2026-08979 2026-10-03T19:05:15.231541+00:00 bdu:2026-08979 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0841 certfr-2026-avi-0841 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-03T19:05:15.231585+00:00 certfr-2026-avi-0841 https://cve.radiocsirt.org/vuln/euvd-2026-331085 EUVD-2026-331085 2026-10-03T19:05:15.231605+00:00 EUVD-2026-331085 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58058 fkie_cve-2026-58058 2026-10-03T19:05:15.231618+00:00

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.

 https://cve.radiocsirt.org/vuln/ghsa-wxvj-hc4r-fq45 GHSA-wxvj-hc4r-fq45 2026-10-03T19:05:15.231651+00:00

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58058 msrc_CVE-2026-58058 — Nmap - Integer Underflow in IPv6 Extension Header Parsing 2026-10-03T19:05:15.231669+00:00 msrc_CVE-2026-58058 https://cve.radiocsirt.org/vuln/oesa-2026-2955 OESA-2026-2955 — nmap security update 2026-10-03T19:05:15.231687+00:00

Affected: openEuler:20.03-LTS-SP4: nmap

Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fix(es):

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.(CVE-2026-58058)

 https://cve.radiocsirt.org/vuln/suse-su-2026:22739-1 SUSE-SU-2026:22739-1 — Security update for nmap 2026-10-03T19:05:15.231715+00:00

Security update for nmap

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58058 UBUNTU-CVE-2026-58058 2026-10-03T19:05:15.231731+00:00

Affected: Ubuntu:14.04:LTS: nmap, Ubuntu:16.04:LTS: nmap, Ubuntu:18.04:LTS: nmap, Ubuntu:20.04:LTS: nmap, Ubuntu:22.04:LTS: nmap, Ubuntu:24.04:LTS: nmap, Ubuntu:25.10: nmap, Ubuntu:26.04:LTS: nmap

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2098 WID-SEC-W-2026-2098 — nmap: Schwachstelle ermöglicht Denial of Service 2026-10-03T19:05:15.231761+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in nmap ausnutzen, um einen Denial of Service Angriff durchzuführen.