https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:13:07 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-wa25182 <p><strong>Affected:</strong> CleanStart: wso2is</p> <p>Security vulnerability affects the wso2is package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: wso2is</p> <p>Security vulnerability affects the wso2is package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-wa25182 https://cve.radiocsirt.org/vuln/euvd-2026-253833 EUVD-2026-253833 https://cve.radiocsirt.org/vuln/euvd-2026-253833 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1396 <p>A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct &#34;User does not exist&#34; error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application&#39;s responses.</p> <p>Exploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.</p> <p>A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct &#34;User does not exist&#34; error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application&#39;s responses.</p> <p>Exploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1396 https://cve.radiocsirt.org/vuln/ghsa-w82p-r9vw-4rg5 <p><strong>Affected:</strong> Maven: org.wso2.carbon.identity.framework:org.wso2.carbon.identity.input.validation.mgt</p> <p>A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct &#34;User does not exist&#34; error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application&#39;s responses.</p> <p>Exploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.</p> <p>There is a fix available in version 7.8.491, however it has not been published to the Maven registry.</p> <p><strong>Affected:</strong> Maven: org.wso2.carbon.identity.framework:org.wso2.carbon.identity.input.validation.mgt</p> <p>A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct &#34;User does not exist&#34; error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application&#39;s responses.</p> <p>Exploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.</p> <p>There is a fix available in version 7.8.491, however it has not been published to the Maven registry.</p> https://cve.radiocsirt.org/vuln/ghsa-w82p-r9vw-4rg5