https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:28:25.007331+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7326 ALSA-2022:7326 — Important: pki-core security update 2026-10-06T13:28:25.279998+00:00

Affected: AlmaLinux:9: pki-acme, AlmaLinux:9: pki-base, AlmaLinux:9: pki-base-java, AlmaLinux:9: pki-ca, AlmaLinux:9: pki-kra, AlmaLinux:9: pki-server, AlmaLinux:9: pki-symkey, AlmaLinux:9: pki-tools, AlmaLinux:9: python3-pki

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05089 bdu:2022-05089 2026-10-06T13:28:25.280090+00:00 bdu:2022-05089 https://cve.radiocsirt.org/vuln/euvd-2026-12356 EUVD-2026-12356 2026-10-06T13:28:25.280108+00:00 EUVD-2026-12356 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2414 fkie_cve-2022-2414 2026-10-06T13:28:25.280120+00:00

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-vjf8-hc3f-mpw4 GHSA-vjf8-hc3f-mpw4 2026-10-06T13:28:25.280143+00:00

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/gsd-2022-2414 gsd-2022-2414 2026-10-06T13:28:25.280157+00:00 gsd-2022-2414 https://cve.radiocsirt.org/vuln/oesa-2023-1417 OESA-2023-1417 — pki-core security update 2026-10-06T13:28:25.280167+00:00

Affected: openEuler:20.03-LTS-SP1: pki-core

Dogtag PKI is a designed enterprise software system manage enterprise Public Key Infrastructure deployments.

Security Fix(es):

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.(CVE-2022-2414)

 https://cve.radiocsirt.org/vuln/rhsa-2022:7326 RHSA-2022:7326 — Red Hat Security Advisory: pki-core security update 2026-10-06T13:28:25.280190+00:00

pki-core: access to external entities when parsing XML can lead to XXE

 https://cve.radiocsirt.org/vuln/rhsa-2022:8915 RHSA-2022:8915 — Red Hat Security Advisory: Red Hat Certificate System 9.7 security update 2026-10-06T13:28:25.280207+00:00

pki-core: access to external entities when parsing XML can lead to XXE

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2414 UBUNTU-CVE-2022-2414 2026-10-06T13:28:25.280221+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1944 WID-SEC-W-2022-1944 — Red Hat Enterprise Linux (pki-core): Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-06T13:28:25.280253+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.