https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T20:29:10.127034+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66286 CVE-2025-66286 — Webkitgtk: authorization bypass through webpage::send-request signal handler 2026-10-28T20:29:10.128056+00:00

Affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP requests bypass this signal handler.