https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:22:42.706190+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-250116 EUVD-2026-250116 2026-10-09T11:22:42.753541+00:00 EUVD-2026-250116 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52621 fkie_cve-2025-52621 2026-10-09T11:22:42.753580+00:00

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

 https://cve.radiocsirt.org/vuln/ghsa-r9j3-884r-cxhp GHSA-r9j3-884r-cxhp 2026-10-09T11:22:42.753615+00:00

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1854 WID-SEC-W-2025-1854 — HCL BigFix Komponente: Mehrere Schwachstellen 2026-10-09T11:22:42.753632+00:00

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.