https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:24:34.653128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234876 EUVD-2026-234876 2026-10-06T21:24:34.730398+00:00 EUVD-2026-234876 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43484 fkie_cve-2022-43484 2026-10-06T21:24:34.730439+00:00

TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application.

 https://cve.radiocsirt.org/vuln/ghsa-q5j9-f95w-f4pr GHSA-q5j9-f95w-f4pr — TERASOLUNA Server Framework vulnerable to ClassLoader manipulation 2026-10-06T21:24:34.730479+00:00

Affected: Maven: org.terasoluna.gfw:terasoluna-gfw-common

TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to ClassLoader manipulation due to using the old version of Spring Framework which contains the vulnerability. The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application.

When using TERASOLUNA Global Framework 1.0.0 (Public review version), update to TERASOLUNA Server Framework for Java 5.7.1.SP1 (using Spring Framework 5.3.18). This vulnerability alone can be addressed by updating to TERASOLUNA Global Framework 1.0.1 (using Spring Framework 3.2.10) or later.

 https://cve.radiocsirt.org/vuln/gsd-2022-43484 gsd-2022-43484 2026-10-06T21:24:34.730511+00:00 gsd-2022-43484 https://cve.radiocsirt.org/vuln/jvndb-2022-000088 jvndb-2022-000088 2026-10-06T21:24:34.730524+00:00

The past versions of TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability. According to the developer, this vulnerability is caused by an improper input validation issue (CWE-20) in the binding mechanism of Spring MVC. NTT DATA Corporation reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NTT DATA Corporation coordinated under the Information Security Early Warning Partnership.