https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T19:48:50.119652+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08602 bdu:2025-08602 2026-10-12T19:48:50.124450+00:00 bdu:2025-08602 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0760 certfr-2025-avi-0760 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-12T19:48:50.124489+00:00 certfr-2025-avi-0760 https://cve.radiocsirt.org/vuln/euvd-2026-257772 EUVD-2026-257772 2026-10-12T19:48:50.124521+00:00 EUVD-2026-257772 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6762 fkie_cve-2024-6762 2026-10-12T19:48:50.124540+00:00

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

 https://cve.radiocsirt.org/vuln/ghsa-r7m4-f9h5-gr79 GHSA-r7m4-f9h5-gr79 — Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks 2026-10-12T19:48:50.124579+00:00

Affected: Maven: org.eclipse.jetty:jetty-servlets

### Impact Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

### Patches * https://github.com/jetty/jetty.project/pull/9715 * https://github.com/jetty/jetty.project/pull/9716

### Workarounds The session usage is intrinsic to the design of the PushCacheFilter. The issue can be avoided by: + not using the PushCacheFilter. Push has been deprecated by the various IETF specs and early hints responses should be used instead. + reducing the reducing the idle timeout on unauthenticated sessions will reduce the time such session stay in memory. + configuring a session cache to use [session passivation](https://jetty.org/docs/jetty/12/programming-guide/server/session.html), so that sessions are not stored in memory, but rather in a database or file system that may have significantly more capacity than memory.

### References * https://github.com/jetty/jetty.project/pull/10756 * https://github.com/jetty/jetty.project/pull/10755

 https://cve.radiocsirt.org/vuln/oesa-2024-2362 OESA-2024-2362 — jetty security update 2026-10-12T19:48:50.124616+00:00

Affected: openEuler:24.03-LTS: jetty, openEuler:22.03-LTS-SP4: jetty, openEuler:22.03-LTS-SP3: jetty, openEuler:20.03-LTS-SP4: jetty, openEuler:22.03-LTS-SP1: jetty

%global desc \ Jetty is a 100% Java HTTP Server and Servlet Container. This means that you\ do not need to configure and run a separate web server (like Apache) in order\ to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\ featured web server for static and dynamic content. Unlike separate\ server/container solutions, this means that your web server and web\ application run in the same process, without interconnection overheads\ and complications. Furthermore, as a pure java component, Jetty can be simply\ included in your application for demonstration, distribution or deployment.\ Jetty is available on all Java supported platforms. \ %global extdesc \\ \ This package contains Security Fix(es): Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.(CVE-2024-6762)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6762 UBUNTU-CVE-2024-6762 2026-10-12T19:48:50.124649+00:00

Affected: Ubuntu:14.04:LTS: jetty, Ubuntu:16.04:LTS: jetty, Ubuntu:16.04:LTS: jetty9, Ubuntu:18.04:LTS: jetty9, Ubuntu:20.04:LTS: jetty9, Ubuntu:22.04:LTS: jetty9

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3176 WID-SEC-W-2024-3176 — Eclipse Jetty: Mehrere Schwachstellen 2026-10-12T19:48:50.124673+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff zu erzeugen und Daten zu manipulieren.