https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:25:18.651784+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105997 EUVD-2026-105997 2026-10-03T15:25:18.756538+00:00 EUVD-2026-105997 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2192 fkie_cve-2013-2192 2026-10-03T15:25:18.756576+00:00

The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication.

 https://cve.radiocsirt.org/vuln/ghsa-pxv5-5vmp-3jj4 GHSA-pxv5-5vmp-3jj4 — Improper Authentication in Apache Hadoop 2026-10-03T15:25:18.756608+00:00

Affected: Maven: org.apache.hadoop:hadoop-common

The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication.

 https://cve.radiocsirt.org/vuln/gsd-2013-2192 gsd-2013-2192 2026-10-03T15:25:18.756634+00:00 gsd-2013-2192 https://cve.radiocsirt.org/vuln/rhsa-2014:0037 RHSA-2014:0037 — Red Hat Security Advisory: jasperreports-server-pro security, bug fix, and enhancement update 2026-10-03T15:25:18.756646+00:00

axis: missing connection hostname check against X.509 certificate name hadoop: man-in-the-middle vulnerability