https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:02:59.679833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2025-0020 fkie_cve-2025-0020 2026-10-02T10:02:59.715883+00:00

Rejected reason: “This CVE ID is Rejected and will not be used. As the CNA of record ESRI has rejected this CVE as it is not a vulnerability”

 https://cve.radiocsirt.org/vuln/ghsa-f95r-2ggc-w963 GHSA-f95r-2ggc-w963 2026-10-02T10:02:59.715936+00:00

Violation of Secure Design Principles, Hidden Functionality, Incorrect Provision of Specified Functionality vulnerability in ArcGIS (Authentication) allows Privilege Abuse, Manipulating Hidden Fields, Configuration/Environment Manipulation.

The ArcGIS client_credentials OAuth 2.0 API implementation does not adhere to the RFC/standards; This hidden (known and by-design, but undocumented) functionality enables a requestor (Referred to as client in RFC 6749) to request an, undocumented, custom token expiration from ArcGIS (Referred to as authorization server in RFC 6749).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1084 WID-SEC-W-2025-1084 — ESRI ArcGIS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T10:02:59.715961+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in ESRI ArcGIS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.