https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:39:00.795945+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-thrift-2026-66053 BIT-thrift-2026-66053 — Apache Thrift: Python TSSLSocket Hostname Matcher Import 2026-10-02T13:39:00.888682+00:00

Affected: Bitnami: thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

This replaces CVE-2026-41603

 https://cve.radiocsirt.org/vuln/brew-evernote-backup-cve-2026-66053 BREW-evernote-backup-CVE-2026-66053 — Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit 2026-10-02T13:39:00.888746+00:00

Affected: Homebrew: evernote-backup

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

This replaces CVE-2026-41603

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T13:39:00.888793+00:00 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/euvd-2026-341206 EUVD-2026-341206 2026-10-02T13:39:00.888830+00:00 EUVD-2026-341206 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66053 fkie_cve-2026-66053 2026-10-02T13:39:00.888850+00:00

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

This replaces CVE-2026-41603

 https://cve.radiocsirt.org/vuln/ghsa-hwrj-9rr4-24xh GHSA-hwrj-9rr4-24xh — Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit 2026-10-02T13:39:00.888890+00:00

Affected: PyPI: thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

This replaces CVE-2026-41603

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66053 msrc_CVE-2026-66053 — Apache Thrift: Python TSSLSocket Hostname Matcher Import 2026-10-02T13:39:00.888931+00:00 msrc_CVE-2026-66053 https://cve.radiocsirt.org/vuln/pysec-2026-3927 PYSEC-2026-3927 — Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit 2026-10-02T13:39:00.888961+00:00

Affected: PyPI: thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

This replaces CVE-2026-41603

 https://cve.radiocsirt.org/vuln/rhsa-2026:49837 RHSA-2026:49837 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T13:39:00.889005+00:00

thrift: Apache Thrift Python bindings: Denial of Service via data amplification thrift: Apache Thrift: Denial of Service via infinite loop thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation thrift: Apache Thrift Ruby bindings: Denial of Service via improper handling of highly compressed data thrift: Apache Thrift Node.js bindings: Denial of Service due to inefficient algorithmic complexity and resource allocation thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-66053 UBUNTU-CVE-2026-66053 2026-10-02T13:39:00.889066+00:00

Affected: Ubuntu:16.04:LTS: python-thrift, Ubuntu:18.04:LTS: python-thrift, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3043 WID-SEC-W-2026-3043 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T13:39:00.889116+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.