https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:16:57.765993+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14470 bdu:2026-14470 2026-10-03T09:16:57.805364+00:00 bdu:2026-14470 https://cve.radiocsirt.org/vuln/cleanstart-2026-bt92518 CLEANSTART-2026-BT92518 — Security fix for CVE-2026-87877 applied in: spark-sc213-jdk17-py312 4.1.3-r2 2026-10-03T09:16:57.805400+00:00

Affected: CleanStart: spark-sc213-jdk17-py312

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-365769 EUVD-2026-365769 2026-10-03T09:16:57.805437+00:00 EUVD-2026-365769 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87877 fkie_cve-2026-87877 2026-10-03T09:16:57.805451+00:00

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM.

 https://cve.radiocsirt.org/vuln/ghsa-mwq5-v3w5-qr6v GHSA-mwq5-v3w5-qr6v 2026-10-03T09:16:57.805476+00:00

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21902-1 openSUSE-SU-2026:21902-1 — Security update for zstd-jni 2026-10-03T09:16:57.805491+00:00

Security update for zstd-jni

 https://cve.radiocsirt.org/vuln/rhsa-2026:71675 RHSA-2026:71675 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.4 for Spring Boot release. 2026-10-03T09:16:57.805509+00:00

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects camel-jms: camel-sjms: camel-amqp: camel-mina: camel-netty: camel-netty-http: camel-vertx-http: camel-infinispan: camel-leveldb: camel-cassandraql: camel-consul: camel-sql: Apache Camel: Information disclosure via deserialization of untrusted data camel-aws2-sqs: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers camel-solr: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation org.apache.cxf/cxf:…

 https://cve.radiocsirt.org/vuln/suse-su-2026:23858-1 SUSE-SU-2026:23858-1 — Security update for zstd-jni 2026-10-03T09:16:57.805590+00:00

Security update for zstd-jni

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87877 UBUNTU-CVE-2026-87877 2026-10-03T09:16:57.805607+00:00

Affected: Ubuntu:24.04:LTS: zstd-jni-java, Ubuntu:26.04:LTS: zstd-jni-java

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM.