https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:09:02.559242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-gy63167 Withdrawn: CLEANSTART-2026-GY63167 — Security fixes in thingsboard 4.3.1.3-r1 2026-10-15T12:09:02.561555+00:00

Withdrawn by the publisher.

Affected: CleanStart: thingsboard

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

 https://cve.radiocsirt.org/vuln/cve-2026-47838 CVE-2026-47838 — Unauthorized User Impersonation when Using X.509 Client Certificates 2026-10-15T12:09:02.561597+00:00

Affected: Spring Security

SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.

Affected versions: Spring Security 5.7.0 through 5.7.24; 5.8.0 through 5.8.26; 6.3.0 through 6.3.17; 6.4.0 through 6.4.17; 6.5.0 through 6.5.10.