https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:31:51.618692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T12:31:51.627071+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-jv78946 CLEANSTART-2026-JV78946 — Security fix for CVE-2026-43828 applied in: cassandra-reaper-fips 3.8.0-r9 2026-10-02T12:31:51.627110+00:00

Affected: CleanStart: cassandra-reaper-fips

Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-321268 EUVD-2026-321268 2026-10-02T12:31:51.627140+00:00 EUVD-2026-321268 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43828 fkie_cve-2026-43828 2026-10-02T12:31:51.627154+00:00

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute.

This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.

Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.

In the affected versions, Shiro-native session manager, as well as Remember-Me manager sends JSESSIONID and rememberMe cookies without 'secure' attribute by default.

 https://cve.radiocsirt.org/vuln/ghsa-c6r4-qjmw-cvj2 GHSA-c6r4-qjmw-cvj2 — Apache Shiro sends sensitive cookies in HTTPS session without 'Secure' attribute 2026-10-02T12:31:51.627180+00:00

Affected: Maven: org.apache.shiro:shiro-web

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute.

This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.

Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.

In the affected versions, Shiro-native session manager, as well as Remember-Me manager sends JSESSIONID and rememberMe cookies without 'secure' attribute by default.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43828 UBUNTU-CVE-2026-43828 2026-10-02T12:31:51.627205+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro, Ubuntu:Pro:24.04:LTS: shiro, Ubuntu:25.10: shiro, Ubuntu:26.04:LTS: shiro

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected versions, Shiro-native session manager, as well as Remember-Me manager sends JSESSIONID and rememberMe cookies without 'secure' attribute by default.