https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:25:11.310134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2014-00013 bdu:2014-00013 2026-10-03T00:25:11.315581+00:00 bdu:2014-00013 https://cve.radiocsirt.org/vuln/euvd-2026-111823 EUVD-2026-111823 2026-10-03T00:25:11.315624+00:00 EUVD-2026-111823 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3467 fkie_cve-2012-3467 2026-10-03T00:25:11.315645+00:00

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

 https://cve.radiocsirt.org/vuln/ghsa-phw8-fw9g-v3xc GHSA-phw8-fw9g-v3xc — Apache QPID Allows Remote Authentication Bypass 2026-10-03T00:25:11.315687+00:00

Affected: Maven: org.apache.qpid:qpid-parent

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

 https://cve.radiocsirt.org/vuln/gsd-2012-3467 gsd-2012-3467 2026-10-03T00:25:11.315731+00:00 gsd-2012-3467 https://cve.radiocsirt.org/vuln/rhsa-2012:1277 RHSA-2012:1277 — Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.2 update 2026-10-03T00:25:11.315746+00:00

qpid-cpp: not closing incomplete connections exhausts file descriptors, leading to DoS qpid-cpp-server-cluster: unauthorized broker access caused by the use of NullAuthenticator catch-up shadow connections