https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T05:33:19.434339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02450 bdu:2024-02450 2026-10-12T05:33:19.437791+00:00 bdu:2024-02450 https://cve.radiocsirt.org/vuln/euvd-2026-217349 EUVD-2026-217349 2026-10-12T05:33:19.437817+00:00 EUVD-2026-217349 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27439 fkie_cve-2024-27439 2026-10-12T05:33:19.437832+00:00

An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.

Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-8vvp-525h-cxf9 GHSA-8vvp-525h-cxf9 — Cross-Site Request Forgery in Apache Wicket 2026-10-12T05:33:19.437860+00:00

Affected: Maven: org.apache.wicket:wicket

An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.

Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-27439 gsd-2024-27439 2026-10-12T05:33:19.437885+00:00 gsd-2024-27439 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0656 WID-SEC-W-2024-0656 — Apache Wicket: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-12T05:33:19.437896+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Wicket ausnutzen, um Sicherheitsvorkehrungen zu umgehen.