https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:44:09.522322+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:61316 ALSA-2026:61316 — Important: xmlrpc-c security update 2026-10-02T10:44:09.541093+00:00

Affected: AlmaLinux:9: xmlrpc-c, AlmaLinux:9: xmlrpc-c-c++, AlmaLinux:9: xmlrpc-c-client, AlmaLinux:9: xmlrpc-c-client++, AlmaLinux:9: xmlrpc-c-devel

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-341256 EUVD-2026-341256 2026-10-02T10:44:09.541164+00:00 EUVD-2026-341256 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15928 fkie_cve-2026-15928 2026-10-02T10:44:09.541181+00:00

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

 https://cve.radiocsirt.org/vuln/ghsa-mrjw-v97f-vmwh GHSA-mrjw-v97f-vmwh 2026-10-02T10:44:09.541204+00:00

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

 https://cve.radiocsirt.org/vuln/oesa-2026-3384 OESA-2026-3384 — xmlrpc-c security update 2026-10-02T10:44:09.541218+00:00

Affected: openEuler:24.03-LTS-SP3: xmlrpc-c

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11409-1 openSUSE-SU-2026:11409-1 — libxmlrpc++9-1.64.03-2.1 on GA media 2026-10-02T10:44:09.541239+00:00

libxmlrpc++9-1.64.03-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:61231 RHSA-2026:61231 — Red Hat Security Advisory: xmlrpc-c security update 2026-10-02T10:44:09.541256+00:00

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

 https://cve.radiocsirt.org/vuln/rlsa-2026:61316 RLSA-2026:61316 — Important: xmlrpc-c security update 2026-10-02T10:44:09.541271+00:00

Affected: Rocky Linux:9: xmlrpc-c

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:23311-1 SUSE-SU-2026:23311-1 — Security update for xmlrpc-c 2026-10-02T10:44:09.541292+00:00

Security update for xmlrpc-c

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15928 UBUNTU-CVE-2026-15928 2026-10-02T10:44:09.541306+00:00

Affected: Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: xmlrpc-c, Ubuntu:Pro:18.04:LTS: xmlrpc-c, Ubuntu:Pro:20.04:LTS: xmlrpc-c, Ubuntu:Pro:22.04:LTS: xmlrpc-c, Ubuntu:Pro:24.04:LTS: xmlrpc-c, Ubuntu:26.04:LTS: xmlrpc-c

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3078 WID-SEC-W-2026-3078 — Red Hat Enterprise Linux (xmlrpc-c): Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T10:44:09.541330+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.