https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:22:57.600966+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-29366 cnvd-2020-29366 2026-10-12T22:22:57.647557+00:00 cnvd-2020-29366 https://cve.radiocsirt.org/vuln/euvd-2026-58411 EUVD-2026-58411 2026-10-12T22:22:57.647589+00:00 EUVD-2026-58411 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17572 fkie_cve-2019-17572 2026-10-12T22:22:57.647604+00:00

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.

 https://cve.radiocsirt.org/vuln/ghsa-5x3v-2gxr-59m2 GHSA-5x3v-2gxr-59m2 — Directory traversal in Apache RocketMQ 2026-10-12T22:22:57.647636+00:00

Affected: Maven: org.apache.rocketmq:rocketmq-broker

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-17572 gsd-2019-17572 2026-10-12T22:22:57.647662+00:00 gsd-2019-17572