https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:10:08.660326+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107401 EUVD-2026-107401 2026-10-18T06:10:08.664510+00:00 EUVD-2026-107401 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4221 fkie_cve-2013-4221 2026-10-18T06:10:08.664556+00:00

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

 https://cve.radiocsirt.org/vuln/ghsa-92j2-5r7p-6hjw GHSA-92j2-5r7p-6hjw — Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML 2026-10-18T06:10:08.664602+00:00

Affected: Maven: org.restlet.jse:org.restlet

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

 https://cve.radiocsirt.org/vuln/gsd-2013-4221 gsd-2013-4221 2026-10-18T06:10:08.664639+00:00 gsd-2013-4221 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4221 UBUNTU-CVE-2013-4221 2026-10-18T06:10:08.664659+00:00

Affected: Ubuntu:16.04:LTS: restlet, Ubuntu:18.04:LTS: restlet

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.