https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:06:01.291007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-23613 cnvd-2018-23613 2026-10-07T07:06:01.298344+00:00 cnvd-2018-23613 https://cve.radiocsirt.org/vuln/euvd-2026-256266 EUVD-2026-256266 2026-10-07T07:06:01.298416+00:00 EUVD-2026-256266 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14667 fkie_cve-2018-14667 2026-10-07T07:06:01.298437+00:00

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

 https://cve.radiocsirt.org/vuln/ghsa-j7mw-7crr-658v GHSA-j7mw-7crr-658v — Richfaces vulnerable to arbitrary code execution 2026-10-07T07:06:01.298478+00:00

Affected: Maven: org.richfaces:richfaces-core

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via `org.ajax4jsf.resource.UserResource$UriData`.

 https://cve.radiocsirt.org/vuln/gsd-2018-14667 gsd-2018-14667 2026-10-07T07:06:01.298514+00:00 gsd-2018-14667 https://cve.radiocsirt.org/vuln/rhsa-2018:3517 RHSA-2018:3517 — Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 security update 2026-10-07T07:06:01.298532+00:00

RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2511 WID-SEC-W-2023-2511 — Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den R… 2026-10-07T07:06:01.298561+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.