https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:46:46.880819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0739 certfr-2026-avi-0739 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-06T19:46:46.928934+00:00 certfr-2026-avi-0739 https://cve.radiocsirt.org/vuln/euvd-2026-329700 EUVD-2026-329700 2026-10-06T19:46:46.928981+00:00 EUVD-2026-329700 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41000 fkie_cve-2026-41000 2026-10-06T19:46:46.928997+00:00

Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of UsernameToken nonces and creation timestamps, Timestamp elements, and certain SAML one-time-use semantics could be ineffective even when operators configured a replay cache on the interceptor.

Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

 https://cve.radiocsirt.org/vuln/ghsa-8qq9-r6cc-qjv9 GHSA-8qq9-r6cc-qjv9 — Spring Web Services: WSS4J validation does not use configured replay cache 2026-10-06T19:46:46.929030+00:00

Affected: Maven: org.springframework.ws:spring-ws-security

Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of UsernameToken nonces and creation timestamps, Timestamp elements, and certain SAML one-time-use semantics could be ineffective even when operators configured a replay cache on the interceptor.

Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.