https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:23:27.788524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371363 EUVD-2026-371363 2026-10-07T10:23:27.838570+00:00 EUVD-2026-371363 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81320 fkie_cve-2026-81320 2026-10-07T10:23:27.838617+00:00

A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object — including the TLS private key in PEM format — is serialized to JSON and written to the operator's standard output. Operator logs are typically forwarded to centralized logging systems and readable by anyone with pods/log access in the openshift-operators namespace. Debug level 1 is a low threshold commonly enabled during troubleshooting.

 https://cve.radiocsirt.org/vuln/ghsa-75j7-xvw4-g5cm GHSA-75j7-xvw4-g5cm 2026-10-07T10:23:27.838654+00:00

A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object — including the TLS private key in PEM format — is serialized to JSON and written to the operator's standard output. Operator logs are typically forwarded to centralized logging systems and readable by anyone with pods/log access in the openshift-operators namespace. Debug level 1 is a low threshold commonly enabled during troubleshooting.