https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:48:18.461890+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-4437 CVE-2016-4437 2026-10-04T17:48:18.500843+00:00

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

 https://cve.radiocsirt.org/vuln/usn-7139-1 USN-7139-1 — shiro vulnerability 2026-10-04T17:48:18.500945+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro

It was discovered that Apache Shiro used a static cipher within the "Remember Me" feature inside authentication by default. An attacker could possibly use this issue to achieve remote code execution or obtain sensitive information.