https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:51:19.568501+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03761 cnvd-2018-03761 2026-10-09T20:51:19.636594+00:00 cnvd-2018-03761 https://cve.radiocsirt.org/vuln/euvd-2026-183050 EUVD-2026-183050 2026-10-09T20:51:19.636637+00:00 EUVD-2026-183050 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1287 fkie_cve-2018-1287 2026-10-09T20:51:19.636653+00:00

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

 https://cve.radiocsirt.org/vuln/ghsa-j7j7-g4ww-pxg5 GHSA-j7j7-g4ww-pxg5 — Missing certificate validation in Apache JMeter 2026-10-09T20:51:19.636684+00:00

Affected: Maven: org.apache.jmeter:ApacheJMeter

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code. This only affect those running in Distributed mode.

In distributed mode, JMeter makes an architectural assumption that it is operating on a 'safe' network. i.e. everyone with access to the network is considered trusted.

 https://cve.radiocsirt.org/vuln/gsd-2018-1287 gsd-2018-1287 2026-10-09T20:51:19.636713+00:00 gsd-2018-1287 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1287 UBUNTU-CVE-2018-1287 2026-10-09T20:51:19.636725+00:00

Affected: Ubuntu:16.04:LTS: jakarta-jmeter, Ubuntu:18.04:LTS: jakarta-jmeter, Ubuntu:20.04:LTS: jakarta-jmeter, Ubuntu:22.04:LTS: jakarta-jmeter, Ubuntu:24.04:LTS: jakarta-jmeter, Ubuntu:25.10: jakarta-jmeter, Ubuntu:26.04:LTS: jakarta-jmeter

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.