https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:50:35.950692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364426 EUVD-2026-364426 2026-10-02T19:50:35.961200+00:00 EUVD-2026-364426 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9165 fkie_cve-2026-9165 2026-10-02T19:50:35.961239+00:00

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.

 https://cve.radiocsirt.org/vuln/ghsa-fw53-q2vg-jr6g GHSA-fw53-q2vg-jr6g 2026-10-02T19:50:35.961272+00:00

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.

 https://cve.radiocsirt.org/vuln/rhsa-2026:36207 RHSA-2026:36207 — Red Hat Security Advisory: RHACS 4.11.1 security and bug fix update 2026-10-02T19:50:35.961289+00:00

stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate axios: Axios: Prototype pollution allows information disclosure and request manipulation golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin