https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:58:40.693433+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280583 EUVD-2026-280583 2026-10-04T13:58:40.759785+00:00 EUVD-2026-280583 https://cve.radiocsirt.org/vuln/fkie_cve-2024-51981 fkie_cve-2024-51981 2026-10-04T13:58:40.759826+00:00

An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request smuggling. This SSRF leverages the WS-Addressing feature used during a WS-Eventing subscription SOAP operation. The attacker can control all the HTTP data sent in the SSRF connection, but the attacker can not receive any data back from this connection.

 https://cve.radiocsirt.org/vuln/ghsa-rx7w-67vh-w8vg GHSA-rx7w-67vh-w8vg 2026-10-04T13:58:40.759860+00:00

An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request smuggling. This SSRF leverages the WS-Addressing feature used during a WS-Eventing subscription SOAP operation. The attacker can control all the HTTP data sent in the SSRF connection, but the attacker can not receive any data back from this connection.

 https://cve.radiocsirt.org/vuln/jvndb-2025-007519 jvndb-2025-007519 2026-10-04T13:58:40.759878+00:00

Multiple BROTHER products provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below. * Exposure of sensitive system information to an unauthorized control sphere (CWE-497) - CVE-2024-51977 * Use of weak credentials (CWE-1391) - CVE-2024-51978 * Stack-based buffer overflow (CWE-121) - CVE-2024-51979 * Server-side request forgery (CWE-918) - CVE-2024-51980, CVE-2024-51981 * Improper handling of unexpected data type (CWE-241) - CVE-2024-51982 * Improper enforcement of behavioral workflow (CWE-841) - CVE-2024-51983 * Insufficiently protected credentials (CWE-522) - CVE-2024-51984 Stephen Fewer of Rapid7 reported this vulnerability to the developer. JPCERT/CC coordinated between the reporter and the developer.