https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:12:54.321927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-04782 bdu:2026-04782 2026-10-02T12:12:54.633768+00:00 bdu:2026-04782 https://cve.radiocsirt.org/vuln/bell-cve-2026-32285 BELL-CVE-2026-32285 2026-10-02T12:12:54.633822+00:00

Affected: Alpaquita:25: cri-tools, Alpaquita:stream: cri-tools

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0540 certfr-2026-avi-0540 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu Gemfire. Elles permettent à un attaquant de provoquer… 2026-10-02T12:12:54.633854+00:00 certfr-2026-avi-0540 https://cve.radiocsirt.org/vuln/cleanstart-2026-ap92343 Withdrawn: CLEANSTART-2026-AP92343 — Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32287, CVE-… 2026-10-02T12:12:54.633871+00:00

Withdrawn by the publisher.

Affected: CleanStart: tempo-fips

Multiple security vulnerabilities affect the tempo-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-365509 EUVD-2026-365509 2026-10-02T12:12:54.633896+00:00 EUVD-2026-365509 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32285 fkie_cve-2026-32285 2026-10-02T12:12:54.633908+00:00

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

 https://cve.radiocsirt.org/vuln/ghsa-6g7g-w4f8-9c9x GHSA-6g7g-w4f8-9c9x — github.com/buger/jsonparser has a denial of service vulnerability 2026-10-02T12:12:54.633929+00:00

Affected: Go: github.com/buger/jsonparser

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10731-1 openSUSE-SU-2026:10731-1 — mcphost-0.34.0-1.1 on GA media 2026-10-02T12:12:54.633947+00:00

mcphost-0.34.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:13548 RHSA-2026:13548 — Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.2 security update 2026-10-02T12:12:54.633966+00:00

lodash: prototype pollution in _.unset and _.omit functions golang: archive/tar: Unbounded allocation when parsing GNU sparse map golang: net/url: Memory exhaustion in query parameter parsing in net/url @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue axios: Axios: Remote Code Execution via Prototype Pollution escalation

 https://cve.radiocsirt.org/vuln/suse-su-2026:21756-1 SUSE-SU-2026:21756-1 — Security update for mcphost 2026-10-02T12:12:54.633997+00:00

Security update for mcphost

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32285 UBUNTU-CVE-2026-32285 2026-10-02T12:12:54.634014+00:00

Affected: Ubuntu:18.04:LTS: golang-github-buger-jsonparser, Ubuntu:20.04:LTS: golang-github-buger-jsonparser, Ubuntu:22.04:LTS: golang-github-buger-jsonparser, Ubuntu:24.04:LTS: golang-github-buger-jsonparser, Ubuntu:25.10: golang-github-buger-jsonparser, Ubuntu:26.04:LTS: golang-github-buger-jsonparser

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1226 WID-SEC-W-2026-1226 — Red Hat Hardened Images RPMs: Mehrere Schwachstellen 2026-10-02T12:12:54.634040+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen und möglicherweise Daten zu manipulieren oder Path-Traversal-Angriffe durchzuführen.