https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:41:23.380087+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-6368 BELL-CVE-2026-6368 2026-10-02T18:41:23.607243+00:00

Affected: Alpaquita:23: glibc, Alpaquita:25: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc, BellSoft Hardened Containers:25: glibc, BellSoft Hardened Containers:stream: glibc

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1249 certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-02T18:41:23.607306+00:00 certfr-2026-avi-1249 https://cve.radiocsirt.org/vuln/euvd-2026-351628 EUVD-2026-351628 2026-10-02T18:41:23.607327+00:00 EUVD-2026-351628 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6368 fkie_cve-2026-6368 2026-10-02T18:41:23.607340+00:00

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

 https://cve.radiocsirt.org/vuln/ghsa-cm6j-gmqf-j2cm GHSA-cm6j-gmqf-j2cm 2026-10-02T18:41:23.607364+00:00

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6368 msrc_CVE-2026-6368 — wordexp with WRDE_APPEND can return or use invalid memory 2026-10-02T18:41:23.607380+00:00 msrc_CVE-2026-6368 https://cve.radiocsirt.org/vuln/oesa-2026-3418 OESA-2026-3418 — glibc security update 2026-10-02T18:41:23.607397+00:00

Affected: openEuler:20.03-LTS-SP4: glibc, openEuler:22.03-LTS-SP4: glibc, openEuler:24.03-LTS-SP1: glibc, openEuler:24.03-LTS-SP3: glibc, openEuler:24.03-LTS-SP4: glibc

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es):

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.(CVE-2026-6368)

When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.(CVE-2026-6791)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11660-1 openSUSE-SU-2026:11660-1 — glibc-2.44-1.1 on GA media 2026-10-02T18:41:23.607436+00:00

glibc-2.44-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:53069 RHSA-2026:53069 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T18:41:23.607454+00:00

glibc: glibc: Process abort due to invalid memory in wordexp glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

 https://cve.radiocsirt.org/vuln/suse-su-2026:23738-1 SUSE-SU-2026:23738-1 — Security update for glibc 2026-10-02T18:41:23.607472+00:00

Security update for glibc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6368 UBUNTU-CVE-2026-6368 2026-10-02T18:41:23.607489+00:00

Affected: Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:26.04:LTS: glibc

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2740 WID-SEC-W-2026-2740 — GNU libc: Schwachstelle ermöglicht Denial of Service 2026-10-02T18:41:23.607516+00:00

Ein lokaler Angreifer kann eine Schwachstelle in GNU libc ausnutzen, um einen Denial of Service Angriff durchzuführen.