https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:54:06.790877+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08918 bdu:2026-08918 2026-10-10T21:54:06.793847+00:00 bdu:2026-08918 https://cve.radiocsirt.org/vuln/bit-apisix-2026-47339 BIT-apisix-2026-47339 — Apache APISIX: authz-casdoor incorrect session sharing 2026-10-10T21:54:06.793879+00:00

Affected: Bitnami: apisix

Incorrect Authorization vulnerability in Apache APISIX.

An attacker can capitalise on authz-casdoor plugin under default configuration to authenticate themselves with credentials from a different source. This issue affects Apache APISIX: from 2.14.1 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-328976 EUVD-2026-328976 2026-10-10T21:54:06.793912+00:00 EUVD-2026-328976 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47339 fkie_cve-2026-47339 2026-10-10T21:54:06.793926+00:00

Incorrect Authorization vulnerability in Apache APISIX.

An attacker can capitalise on authz-casdoor plugin under default configuration to authenticate themselves with credentials from a different source. This issue affects Apache APISIX: from 2.14.1 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-2455-m68h-qwxv GHSA-2455-m68h-qwxv 2026-10-10T21:54:06.793949+00:00

Incorrect Authorization vulnerability in Apache APISIX.

An attacker can capitalise on authz-casdoor plugin under default configuration to authenticate themselves with credentials from a different source. This issue affects Apache APISIX: from 2.14.1 through 3.16.0.

Users are recommended to upgrade to version 3.17.0, which fixes the issue.