https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T02:06:52.372300+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-fx60287 Withdrawn: CLEANSTART-2026-FX60287 — Security fixes for CVE-2026-0636, CVE-2026-3260, CVE-2026-33558, CVE-2026-33870, CVE-2026-33871, CVE-2026-3505, CVE-202… 2026-10-10T02:06:52.376676+00:00

Withdrawn by the publisher.

Affected: CleanStart: wildfly

Multiple security vulnerabilities affect the wildfly package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2026-42404 CVE-2026-42404 — Apache Neethi: Unrestricted HTTP Redirect Following in Policy References 2026-10-10T02:06:52.376730+00:00

Affected: Apache Software Foundation Apache Neethi

Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP adddresses. From 3.2.2, only http or https URIs are allowed, and link-local/multicast/any-local addresses are forbidden.

Users are recommended to upgrade to version 3.2.2, which fixes this issue.