https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:38:38.089521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T10:38:38.178734+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 Withdrawn: CLEANSTART-2026-AH35927 — DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used w… 2026-10-03T10:38:38.178776+00:00

Withdrawn by the publisher.

Affected: CleanStart: wso2is

Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-374434 EUVD-2026-374434 2026-10-03T10:38:38.178809+00:00 EUVD-2026-374434 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71290 fkie_cve-2026-71290 2026-10-03T10:38:38.178823+00:00

Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.

Please note the classic version of HttpClient is not affected by this vulnerability.

Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-72q8-9rgw-5g6j GHSA-72q8-9rgw-5g6j 2026-10-03T10:38:38.178850+00:00

Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.

Please note the classic version of HttpClient is not affected by this vulnerability.

Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0375 NCSC-2026-0375 — Kwetsbaarheden verholpen in Oracle Communications 2026-10-03T10:38:38.178869+00:00 NCSC-2026-0375 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71290 UBUNTU-CVE-2026-71290 2026-10-03T10:38:38.178919+00:00

Affected: Ubuntu:22.04:LTS: httpcomponents-core5, Ubuntu:24.04:LTS: httpcomponents-core5, Ubuntu:26.04:LTS: httpcomponents-core5

Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain. Please note the classic version of HttpClient is not affected by this vulnerability. Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2782 WID-SEC-W-2026-2782 — Apache HttpComponents: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T10:38:38.178944+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um Sicherheitsvorkehrungen zu umgehen.