https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:06:11.531207+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T11:06:11.624652+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-fr63847 Withdrawn: CLEANSTART-2026-FR63847 — yawkat LZ4 Java provides LZ4 compression for Java 2026-10-02T11:06:11.624692+00:00

Withdrawn by the publisher.

Affected: CleanStart: elasticsearch

Multiple security vulnerabilities affect the elasticsearch package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-343704 EUVD-2026-343704 2026-10-02T11:06:11.624724+00:00 EUVD-2026-343704 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58059 fkie_cve-2026-58059 2026-10-02T11:06:11.624737+00:00

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

 https://cve.radiocsirt.org/vuln/ghsa-4mwx-9cgq-h2wp GHSA-4mwx-9cgq-h2wp 2026-10-02T11:06:11.624759+00:00

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

 https://cve.radiocsirt.org/vuln/ncsc-2026-0325 NCSC-2026-0325 — Kwetsbaarheden verholpen in Atlassian producten 2026-10-02T11:06:11.624775+00:00 NCSC-2026-0325 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11445-1 openSUSE-SU-2026:11445-1 — bouncycastle-1.85-1.1 on GA media 2026-10-02T11:06:11.624888+00:00

bouncycastle-1.85-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:71675 RHSA-2026:71675 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.4 for Spring Boot release. 2026-10-02T11:06:11.624918+00:00

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects camel-jms: camel-sjms: camel-amqp: camel-mina: camel-netty: camel-netty-http: camel-vertx-http: camel-infinispan: camel-leveldb: camel-cassandraql: camel-consul: camel-sql: Apache Camel: Information disclosure via deserialization of untrusted data camel-aws2-sqs: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers camel-solr: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation org.apache.cxf/cxf:…

 https://cve.radiocsirt.org/vuln/suse-su-2026:23127-1 SUSE-SU-2026:23127-1 — Security update for bouncycastle 2026-10-02T11:06:11.625004+00:00

Security update for bouncycastle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58059 UBUNTU-CVE-2026-58059 2026-10-02T11:06:11.625036+00:00

Affected: Ubuntu:Pro:16.04:LTS: bouncycastle, Ubuntu:Pro:18.04:LTS: bouncycastle, Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle, Ubuntu:26.04:LTS: bouncycastle

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2622 WID-SEC-W-2026-2622 — Bouncy Castle: Mehrere Schwachstellen 2026-10-02T11:06:11.625064+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.