https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:27:20.404560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375377 EUVD-2026-375377 2026-10-03T02:27:20.407172+00:00 EUVD-2026-375377 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73064 fkie_cve-2026-73064 2026-10-03T02:27:20.407204+00:00

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

 https://cve.radiocsirt.org/vuln/ghsa-crc8-r3c8-83vw GHSA-crc8-r3c8-83vw 2026-10-03T02:27:20.407280+00:00

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73064 UBUNTU-CVE-2026-73064 2026-10-03T02:27:20.407298+00:00

Affected: Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls, Ubuntu:Pro:22.04:LTS: mbedtls, Ubuntu:Pro:24.04:LTS: mbedtls, Ubuntu:26.04:LTS: mbedtls

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.