https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:01:29.113292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T09:01:29.134847+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 Withdrawn: CLEANSTART-2026-AM39668 — yawkat LZ4 Java provides LZ4 compression for Java 2026-10-02T09:01:29.134891+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-343644 EUVD-2026-343644 2026-10-02T09:01:29.134923+00:00 EUVD-2026-343644 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59639 fkie_cve-2026-59639 2026-10-02T09:01:29.134937+00:00

In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).

 https://cve.radiocsirt.org/vuln/ghsa-r3rc-x3pq-jmw7 GHSA-r3rc-x3pq-jmw7 2026-10-02T09:01:29.134970+00:00

In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).

 https://cve.radiocsirt.org/vuln/ncsc-2026-0325 NCSC-2026-0325 — Kwetsbaarheden verholpen in Atlassian producten 2026-10-02T09:01:29.134999+00:00 NCSC-2026-0325 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11445-1 openSUSE-SU-2026:11445-1 — bouncycastle-1.85-1.1 on GA media 2026-10-02T09:01:29.135178+00:00

bouncycastle-1.85-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23127-1 SUSE-SU-2026:23127-1 — Security update for bouncycastle 2026-10-02T09:01:29.135245+00:00

Security update for bouncycastle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59639 UBUNTU-CVE-2026-59639 2026-10-02T09:01:29.135301+00:00

Affected: Ubuntu:Pro:16.04:LTS: bouncycastle, Ubuntu:Pro:18.04:LTS: bouncycastle, Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle, Ubuntu:26.04:LTS: bouncycastle

In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2622 WID-SEC-W-2026-2622 — Bouncy Castle: Mehrere Schwachstellen 2026-10-02T09:01:29.135363+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.