https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:57:15 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1249 certfr-2026-avi-1249 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1249 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa85739 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: openbao-fips</p> <p>Package openbao-fips version 2.2.2-r8 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: openbao-fips</p> <p>Package openbao-fips version 2.2.2-r8 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aa85739 https://cve.radiocsirt.org/vuln/euvd-2026-292915 EUVD-2026-292915 https://cve.radiocsirt.org/vuln/euvd-2026-292915 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32952 <p>go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.</p> <p>go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32952 https://cve.radiocsirt.org/vuln/ghsa-pjcq-xvwq-hhpj <p><strong>Affected:</strong> Go: github.com/Azure/go-ntlmssp</p> <p>go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.</p> <p><strong>Affected:</strong> Go: github.com/Azure/go-ntlmssp</p> <p>go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-pjcq-xvwq-hhpj https://cve.radiocsirt.org/vuln/opensuse-su-2026:10672-1 <p>cmctl-2.5.0-1.1 on GA media</p> <p>cmctl-2.5.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10672-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32952 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:20.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:22.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:24.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:25.10: golang-github-azure-go-ntlmssp, Ubuntu:26.04:LTS: golang-github-azure-go-ntlmssp</p> <p>go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:20.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:22.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:24.04:LTS: golang-github-azure-go-ntlmssp, Ubuntu:25.10: golang-github-azure-go-ntlmssp, Ubuntu:26.04:LTS: golang-github-azure-go-ntlmssp</p> <p>go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32952 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046