https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:14:19.594740+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-76956 BELL-CVE-2026-76956 2026-10-02T16:14:19.706082+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

 https://cve.radiocsirt.org/vuln/euvd-2026-356957 EUVD-2026-356957 2026-10-02T16:14:19.706139+00:00 EUVD-2026-356957 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76956 fkie_cve-2026-76956 2026-10-02T16:14:19.706154+00:00

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

 https://cve.radiocsirt.org/vuln/ghsa-x282-q22w-c9hm GHSA-x282-q22w-c9hm 2026-10-02T16:14:19.706179+00:00

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-76956 msrc_CVE-2026-76956 — In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy,… 2026-10-02T16:14:19.706194+00:00 msrc_CVE-2026-76956 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11733-1 openSUSE-SU-2026:11733-1 — expat-2.8.4-1.1 on GA media 2026-10-02T16:14:19.706218+00:00

expat-2.8.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:60451 RHSA-2026:60451 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T16:14:19.706236+00:00

libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

 https://cve.radiocsirt.org/vuln/suse-su-2026:23894-1 SUSE-SU-2026:23894-1 — Security update for expat 2026-10-02T16:14:19.706253+00:00

Security update for expat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-76956 UBUNTU-CVE-2026-76956 2026-10-02T16:14:19.706278+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3, Ubuntu:16.04:LTS: gdcm, Ubuntu:16.04:LTS: insighttoolkit4 and 50 more

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2944 WID-SEC-W-2026-2944 — expat: Schwachstelle ermöglicht Denial of Service 2026-10-02T16:14:19.706356+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.