https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T12:48:22.852141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-122605 EUVD-2026-122605 2026-10-18T12:48:22.854781+00:00 EUVD-2026-122605 https://cve.radiocsirt.org/vuln/fkie_cve-2009-1595 fkie_cve-2009-1595 2026-10-18T12:48:22.854813+00:00

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.

 https://cve.radiocsirt.org/vuln/ghsa-r62w-x9pp-jrqp GHSA-r62w-x9pp-jrqp — Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts 2026-10-18T12:48:22.854843+00:00

Affected: Maven: org.igniterealtime.openfire:parent

The `jabber:iq:auth` implementation in `IQAuthHandler.java` in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a `passwd_change` action.

 https://cve.radiocsirt.org/vuln/gsd-2009-1595 gsd-2009-1595 2026-10-18T12:48:22.854867+00:00 gsd-2009-1595