https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:59:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11287 bdu:2025-11287 https://cve.radiocsirt.org/vuln/bdu:2025-11287 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0792 certfr-2025-avi-0792 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0792 https://cve.radiocsirt.org/vuln/euvd-2026-252925 EUVD-2026-252925 https://cve.radiocsirt.org/vuln/euvd-2026-252925 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41248 <p>The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41249 https://spring.io/security/cve-2025-41249 .</p> <p>The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41249 https://spring.io/security/cve-2025-41249 .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41248 https://cve.radiocsirt.org/vuln/ghsa-8v5q-rhf3-jphm <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-core</p> <p>The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41249 https://spring.io/security/cve-2025-41249 .</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-core</p> <p>The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41249 https://spring.io/security/cve-2025-41249 .</p> https://cve.radiocsirt.org/vuln/ghsa-8v5q-rhf3-jphm https://cve.radiocsirt.org/vuln/jvndb-2026-010299 <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.</p> <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-010299 https://cve.radiocsirt.org/vuln/ncsc-2026-0025 NCSC-2026-0025 https://cve.radiocsirt.org/vuln/ncsc-2026-0025 https://cve.radiocsirt.org/vuln/rhsa-2025:18028 <p>org.eclipse.jgit: XXE vulnerability in Eclipse JGit org.springframework.security/spring-security-core: Spring Security authorization bypass org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution</p> <p>org.eclipse.jgit: XXE vulnerability in Eclipse JGit org.springframework.security/spring-security-core: Spring Security authorization bypass org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution</p> https://cve.radiocsirt.org/vuln/rhsa-2025:18028 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2060 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security und VMware Tanzu Spring Framework ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security und VMware Tanzu Spring Framework ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2060