https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T13:44:13.009342+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04429 bdu:2024-04429 2026-10-19T13:44:13.079217+00:00 bdu:2024-04429 https://cve.radiocsirt.org/vuln/euvd-2026-217428 EUVD-2026-217428 2026-10-19T13:44:13.079265+00:00 EUVD-2026-217428 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36522 fkie_cve-2024-36522 2026-10-19T13:44:13.079280+00:00

The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-hhwc-gh8h-9rrp GHSA-hhwc-gh8h-9rrp — Apache Wicket: Remote code execution via XSLT injection 2026-10-19T13:44:13.079311+00:00

Affected: Maven: org.apache.wicket:wicket-util

The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1271 WID-SEC-W-2024-1271 — Apache Wicket: Schwachstelle ermöglicht Codeausführung 2026-10-19T13:44:13.079336+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Wicket ausnutzen, um beliebigen Programmcode auszuführen.