https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:14:16.746107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06440 bdu:2022-06440 2026-10-16T14:14:16.822193+00:00 bdu:2022-06440 https://cve.radiocsirt.org/vuln/euvd-2026-233481 EUVD-2026-233481 2026-10-16T14:14:16.822237+00:00 EUVD-2026-233481 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39267 fkie_cve-2022-39267 2026-10-16T14:14:16.822252+00:00

Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With: XMLHttpRequest field in the request header. This issue has been patched in 1.8.8-release. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-mxrx-fg8p-5p5j GHSA-mxrx-fg8p-5p5j — Bifrost vulnerable to authentication check flaw that leads to authentication bypass 2026-10-16T14:14:16.822284+00:00

Affected: Go: github.com/brokercap/Bifrost

### Impact The admin and monitor user groups need to be authenticated by username and password. If we delete the X-Requested-With: XMLHttpRequest field in the request header,the authentication will be bypassed.

### Patches https://github.com/brockercap/Bifrost/pull/201

### Workarounds Upgrade to the latest version

 https://cve.radiocsirt.org/vuln/gsd-2022-39267 gsd-2022-39267 2026-10-16T14:14:16.822310+00:00 gsd-2022-39267