<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-21T07:17:12.970085+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2022-00235</id>
    <title>bdu:2022-00235</title>
    <updated>2026-10-21T07:17:12.976989+00:00</updated>
    <content>bdu:2022-00235</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2022-00235"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-29352</id>
    <title>EUVD-2026-29352</title>
    <updated>2026-10-21T07:17:12.977027+00:00</updated>
    <content>EUVD-2026-29352</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-29352"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2021-36370</id>
    <title>fkie_cve-2021-36370</title>
    <updated>2026-10-21T07:17:12.977042+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2021-36370"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-j8px-qjm3-fx72</id>
    <title>GHSA-j8px-qjm3-fx72</title>
    <updated>2026-10-21T07:17:12.977072+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-j8px-qjm3-fx72"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2021-36370</id>
    <title>gsd-2021-36370</title>
    <updated>2026-10-21T07:17:12.977088+00:00</updated>
    <content>gsd-2021-36370</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2021-36370"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2021-36370</id>
    <title>msrc_CVE-2021-36370 — An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection the fingerprint of t…</title>
    <updated>2026-10-21T07:17:12.977100+00:00</updated>
    <content>msrc_CVE-2021-36370</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2021-36370"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2022-1771</id>
    <title>OESA-2022-1771 — mc security update</title>
    <updated>2026-10-21T07:17:12.977116+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: mc, openEuler:20.03-LTS-SP3: mc, openEuler:22.03-LTS: mc</p>
<p>GNU Midnight Commander is a visual file manager, licensed under GNU General Public License and therefore qualifies as Free Software. It&amp;apos;s a feature rich full-screen text mode application that allows you to copy, move and delete files and whole directory trees, search for files and run commands in the subshell. Internal viewer and editor are included.

Security Fix(es):

An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.(CVE-2021-36370)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2022-1771"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2022:0061-1</id>
    <title>openSUSE-SU-2022:0061-1 — Security update for mc</title>
    <updated>2026-10-21T07:17:12.977146+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for mc</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2022:0061-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36370</id>
    <title>UBUNTU-CVE-2021-36370</title>
    <updated>2026-10-21T07:17:12.977162+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mc, Ubuntu:Pro:16.04:LTS: mc, Ubuntu:Pro:18.04:LTS: mc, Ubuntu:Pro:20.04:LTS: mc, Ubuntu:22.04:LTS: mc</p>
<p>An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36370"/>
  </entry>
</feed>
