https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:12:35.589275+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-112497 EUVD-2026-112497 2026-10-09T21:12:35.592587+00:00 EUVD-2026-112497 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4545 fkie_cve-2012-4545 2026-10-09T21:12:35.592621+00:00

The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.

 https://cve.radiocsirt.org/vuln/ghsa-rqcr-v8rp-mcvc GHSA-rqcr-v8rp-mcvc 2026-10-09T21:12:35.592652+00:00

The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.

 https://cve.radiocsirt.org/vuln/gsd-2012-4545 gsd-2012-4545 2026-10-09T21:12:35.592670+00:00 gsd-2012-4545 https://cve.radiocsirt.org/vuln/rhsa-2013:0250 RHSA-2013:0250 — Red Hat Security Advisory: elinks security update 2026-10-09T21:12:35.592682+00:00

elinks: Improper delegation of client credentials during GSS negotiation