https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:57:32.999721+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-48977 CVE-2025-48977 — Apache Ignite: REST HTTP arbitrary file read vulnerability 2026-10-08T15:57:33.016127+00:00

Affected: Apache Software Foundation Apache Ignite

Relative Path Traversal vulnerability in Apache Ignite REST API.

Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0.

Users are recommended to upgrade to version 2.18.0, which fixes the issue.