https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:19:20.428188+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-59250 CVE-2025-59250 — JDBC Driver for SQL Server Spoofing Vulnerability 2026-10-04T21:19:21.113295+00:00

Affected: Microsoft JDBC Driver for SQL Server 10.2, Microsoft JDBC Driver for SQL Server 11.2, Microsoft JDBC Driver for SQL Server 12.10, Microsoft JDBC Driver for SQL Server 12.2, Microsoft JDBC Driver for SQL Server 12.4, Microsoft JDBC Driver for SQL Server 12.6, Microsoft JDBC Driver for SQL Server 12.8, Microsoft JDBC Driver for SQL Server 13.2

Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

 https://cve.radiocsirt.org/vuln/ghsa-3qp7-7mw8-wx86 GHSA-3qp7-7mw8-wx86 — Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking 2026-10-04T21:19:21.113381+00:00

Affected: Maven: io.netty:netty-handler

### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions.

### Details `io.netty.handler.ipfilter.IpSubnetFilterRule#compareTo(java.net.InetSocketAddress)` method performs a bitwise AND between the incoming IP address and the configured networkAddress, instead of the subnetMask.

### Impact Access Control Bypass. Attacker can bypass IpSubnetFilter IPv6 access controls.