https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:51:21.137226+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-276436 EUVD-2026-276436 2026-10-06T07:51:21.188406+00:00 EUVD-2026-276436 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32692 fkie_cve-2026-32692 2026-10-06T07:51:21.188444+00:00

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.

 https://cve.radiocsirt.org/vuln/ghsa-89x7-5m5m-mcmm GHSA-89x7-5m5m-mcmm — Juju has unauthorized update of out-of-scope Vault secrets 2026-10-06T07:51:21.188477+00:00

Affected: Go: github.com/juju/juju

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.

### Impact An authenticated unit agent can update any secret revision of a Vault back-end that the unit's model uses. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.

### Patches 3.6.19