https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:24:49.553835+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-15902 cnvd-2018-15902 2026-10-03T22:24:49.780470+00:00 cnvd-2018-15902 https://cve.radiocsirt.org/vuln/euvd-2026-64877 EUVD-2026-64877 2026-10-03T22:24:49.780523+00:00 EUVD-2026-64877 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10862 fkie_cve-2018-10862 2026-10-03T22:24:49.780539+00:00

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-w8r2-5j8x-x8j6 GHSA-w8r2-5j8x-x8j6 — Improper Limitation of a Pathname to a Restricted Directory in WildFly 2026-10-03T22:24:49.780572+00:00

Affected: Maven: org.wildfly.core:wildfly-server

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2018-10862 gsd-2018-10862 2026-10-03T22:24:49.780597+00:00 gsd-2018-10862 https://cve.radiocsirt.org/vuln/rhsa-2018:2276 RHSA-2018:2276 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1 security update 2026-10-03T22:24:49.780610+00:00

apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)