https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:50.089323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 certfr-2026-avi-1032 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:39:50.174084+00:00 certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 Withdrawn: CLEANSTART-2026-AH35927 — DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used w… 2026-10-02T19:39:50.174127+00:00

Withdrawn by the publisher.

Affected: CleanStart: wso2is

Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-349007 EUVD-2026-349007 2026-10-02T19:39:50.174162+00:00 EUVD-2026-349007 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64958 fkie_cve-2026-64958 2026-10-02T19:39:50.174176+00:00

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-3p6r-x275-5x98 GHSA-3p6r-x275-5x98 2026-10-02T19:39:50.174198+00:00

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2682 WID-SEC-W-2026-2682 — Apache CXF: Mehrere Schwachstellen 2026-10-02T19:39:50.174213+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.