https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:02:22.835323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-gg40538 Withdrawn: CLEANSTART-2026-GG40538 — jackson-databind's deserializer for java 2026-10-03T12:02:22.905667+00:00

Withdrawn by the publisher.

Affected: CleanStart: trino

Multiple security vulnerabilities affect the trino package. jackson-databind's deserializer for java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-358625 EUVD-2026-358625 2026-10-03T12:02:22.905728+00:00 EUVD-2026-358625 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76816 fkie_cve-2026-76816 2026-10-03T12:02:22.905745+00:00

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null bytes in MQTT UTF-8 string fields and potentially causing routing, access-control, or identity mismatches in downstream brokers. The vulnerability is exploitable when an application uses Netty's MQTT encoder to construct messages from user-controlled input. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11882-1 openSUSE-SU-2026:11882-1 — netty-4.1.138-1.1 on GA media 2026-10-03T12:02:22.905771+00:00

netty-4.1.138-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-76816 UBUNTU-CVE-2026-76816 2026-10-03T12:02:22.905806+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:Pro:26.04:LTS: netty

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null bytes in MQTT UTF-8 string fields and potentially causing routing, access-control, or identity mismatches in downstream brokers. The vulnerability is exploitable when an application uses Netty's MQTT encoder to construct messages from user-controlled input. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2712 WID-SEC-W-2026-2712 — Netty: Mehrere Schwachstellen 2026-10-03T12:02:22.905838+00:00

Ein Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.