https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:19:23.230154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04514 bdu:2024-04514 2026-10-05T23:19:23.321335+00:00 bdu:2024-04514 https://cve.radiocsirt.org/vuln/euvd-2026-199608 EUVD-2026-199608 2026-10-05T23:19:23.321373+00:00 EUVD-2026-199608 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45860 fkie_cve-2023-45860 2026-10-05T23:19:23.321387+00:00

In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.

 https://cve.radiocsirt.org/vuln/ghsa-8h4x-xvjp-vf99 GHSA-8h4x-xvjp-vf99 — Hazelcast Platform permission checking in CSV File Source connector 2026-10-05T23:19:23.321418+00:00

Affected: Maven: com.hazelcast:hazelcast, Maven: com.hazelcast:hazelcast-enterprise

### Impact In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.

### Patches Fix versions: 5.3.5, 5.4.0-BETA-1

### Workaround Disabling Hazelcast Jet processing engine in Hazelcast member configuration workarounds the issue. As a result SQL and Jet jobs won't work.

 https://cve.radiocsirt.org/vuln/gsd-2023-45860 gsd-2023-45860 2026-10-05T23:19:23.321499+00:00 gsd-2023-45860 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0410 WID-SEC-W-2024-0410 — Hazelcast: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-05T23:19:23.321513+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hazelcast ausnutzen, um Informationen offenzulegen.