https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:43:20.177383+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0065 certfr-2026-avi-0065 — De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Certaines d'entre elles permettent à un at… 2026-10-02T10:43:20.184231+00:00 certfr-2026-avi-0065 https://cve.radiocsirt.org/vuln/euvd-2026-260017 EUVD-2026-260017 2026-10-02T10:43:20.184285+00:00 EUVD-2026-260017 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53689 fkie_cve-2025-53689 2026-10-02T10:43:20.184301+00:00

Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges.

Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.

 https://cve.radiocsirt.org/vuln/ghsa-44c3-38h8-9fh9 GHSA-44c3-38h8-9fh9 — Apache Jackrabbit vulnerable to blind XXE attack due to insecure document build 2026-10-02T10:43:20.184332+00:00

Affected: Maven: org.apache.jackrabbit:jackrabbit-spi-commons, Maven: org.apache.jackrabbit:jackrabbit-core

Blind XXE vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges.

Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0034 NCSC-2026-0034 — Kwetsbaarheden verholpen in Atlassian producten 2026-10-02T10:43:20.184362+00:00 NCSC-2026-0034 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53689 UBUNTU-CVE-2025-53689 2026-10-02T10:43:20.184404+00:00

Affected: Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit, Ubuntu:18.04:LTS: jackrabbit, Ubuntu:20.04:LTS: jackrabbit, Ubuntu:22.04:LTS: jackrabbit, Ubuntu:24.04:LTS: jackrabbit, Ubuntu:25.10: jackrabbit, Ubuntu:26.04:LTS: jackrabbit

Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1547 WID-SEC-W-2025-1547 — Apache Jackrabbit Oak: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-02T10:43:20.184434+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Jackrabbit Oak ausnutzen, um auf sensible Dateien oder Dienste zuzugreifen und möglicherweise andere nicht spezifizierte Angriffe durchzuführen.