https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:56:53.181290+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-10847 CVE-2018-10847 2026-10-06T01:56:53.184399+00:00

Affected: [UNKNOWN] prosody

prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.

 https://cve.radiocsirt.org/vuln/usn-4834-1 USN-4834-1 — prosody vulnerability 2026-10-06T01:56:53.184475+00:00

Affected: Ubuntu:Pro:18.04:LTS: prosody

It was discovered that Prosody incorrectly validated the virtual host associated with a user session across stream restarts. A remote attacker could use this issue to gain unintended access to resources.