https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:34:08.860339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-504 certa-2011-avi-504 — Plusieurs vulnérabilités de Spring Framework ont été corrigées. Certaines permettent l'exécution de code arbitraire à d… 2026-10-03T13:34:08.924926+00:00 certa-2011-avi-504 https://cve.radiocsirt.org/vuln/euvd-2026-115680 EUVD-2026-115680 2026-10-03T13:34:08.924967+00:00 EUVD-2026-115680 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2731 fkie_cve-2011-2731 2026-10-03T13:34:08.924982+00:00

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.

 https://cve.radiocsirt.org/vuln/ghsa-4644-hg35-55m9 GHSA-4644-hg35-55m9 — Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security 2026-10-03T13:34:08.925011+00:00

Affected: Maven: org.springframework.security:spring-security-core

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.

 https://cve.radiocsirt.org/vuln/gsd-2011-2731 gsd-2011-2731 2026-10-03T13:34:08.925035+00:00 gsd-2011-2731