https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T03:26:27.718470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-39712 cnvd-2019-39712 2026-10-10T03:26:27.797042+00:00 cnvd-2019-39712 https://cve.radiocsirt.org/vuln/euvd-2026-54076 EUVD-2026-54076 2026-10-10T03:26:27.797098+00:00 EUVD-2026-54076 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10908 fkie_cve-2019-10908 2026-10-10T03:26:27.797114+00:00

In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which uses java.util.Random internally. This PRNG has a 48-bit seed that can easily be bruteforced, leading to trivial privilege escalation attacks.

 https://cve.radiocsirt.org/vuln/ghsa-8p8f-c57x-4qw8 GHSA-8p8f-c57x-4qw8 2026-10-10T03:26:27.797148+00:00

In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which uses java.util.Random internally. This PRNG has a 48-bit seed that can easily be bruteforced, leading to trivial privilege escalation attacks.

 https://cve.radiocsirt.org/vuln/gsd-2019-10908 gsd-2019-10908 2026-10-10T03:26:27.797165+00:00 gsd-2019-10908