https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:36:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09522 bdu:2026-09522 https://cve.radiocsirt.org/vuln/bdu:2026-09522 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa56293 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: fluent-bit-plugin-loki</p> <p>Package fluent-bit-plugin-loki version 3.6.5-r0 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-24051, CVE-2026-25679, CVE-2026-33186</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: fluent-bit-plugin-loki</p> <p>Package fluent-bit-plugin-loki version 3.6.5-r0 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-24051, CVE-2026-25679, CVE-2026-33186</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aa56293 https://cve.radiocsirt.org/vuln/euvd-2026-267124 EUVD-2026-267124 https://cve.radiocsirt.org/vuln/euvd-2026-267124 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24051 <p>OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in sdk/resource/host_id.go executes the ioreg system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application. A fix was released with v1.40.0.</p> <p>OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in sdk/resource/host_id.go executes the ioreg system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application. A fix was released with v1.40.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24051 https://cve.radiocsirt.org/vuln/ghsa-9h8m-3fm2-qjrq <p><strong>Affected:</strong> Go: go.opentelemetry.io/otel/sdk</p> <p>### Impact The OpenTelemetry Go SDK in version `v1.20.0`-`1.39.0` is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in `sdk/resource/host_id.go` executes the `ioreg` system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application.</p> <p>### Patches This has been patched in [d45961b](https://github.com/open-telemetry/opentelemetry-go/commit/d45961bcda453fcbdb6469c22d6e88a1f9970a53), which was released with `v1.40.0`.</p> <p>### References - [CWE-426: Untrusted Search Path](https://cwe.mitre.org/data/definitions/426.html)</p> <p><strong>Affected:</strong> Go: go.opentelemetry.io/otel/sdk</p> <p>### Impact The OpenTelemetry Go SDK in version `v1.20.0`-`1.39.0` is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in `sdk/resource/host_id.go` executes the `ioreg` system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application.</p> <p>### Patches This has been patched in [d45961b](https://github.com/open-telemetry/opentelemetry-go/commit/d45961bcda453fcbdb6469c22d6e88a1f9970a53), which was released with `v1.40.0`.</p> <p>### References - [CWE-426: Untrusted Search Path](https://cwe.mitre.org/data/definitions/426.html)</p> https://cve.radiocsirt.org/vuln/ghsa-9h8m-3fm2-qjrq https://cve.radiocsirt.org/vuln/msrc_cve-2026-24051 msrc_CVE-2026-24051 https://cve.radiocsirt.org/vuln/msrc_cve-2026-24051 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10396-1 <p>openbao-2.5.1-1.1 on GA media</p> <p>openbao-2.5.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10396-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2437 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2437