Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:38:38 +0000 certfr-2026-avi-0488 — De multiples vulnérabilités ont été découvertes dans Spring Boot. Certaines d'entre elles permettent à un attaquant de… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0488 certfr-2026-avi-0488 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0488 EUVD-2026-293207 https://cve.radiocsirt.org/vuln/euvd-2026-293207 EUVD-2026-293207 https://cve.radiocsirt.org/vuln/euvd-2026-293207 fkie_cve-2026-40970 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40970 <p>When configured to use an SSL bundle, Spring Boot&#39;s Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> <p>When configured to use an SSL bundle, Spring Boot&#39;s Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40970 GHSA-c96x-rpm4-349p — Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsear… https://cve.radiocsirt.org/vuln/ghsa-c96x-rpm4-349p <p><strong>Affected:</strong> Maven: org.springframework.boot:spring-boot-elasticsearch</p> <p>When configured to use an SSL bundle, Spring Boot&#39;s Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> <p><strong>Affected:</strong> Maven: org.springframework.boot:spring-boot-elasticsearch</p> <p>When configured to use an SSL bundle, Spring Boot&#39;s Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> https://cve.radiocsirt.org/vuln/ghsa-c96x-rpm4-349p WID-SEC-W-2026-1263 — VMware Tanzu Spring Boot: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1263 <p>Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Boot ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Daten zu manipulieren oder offenzulegen oder authentifizierte Benutzer zu kapern.</p> <p>Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Boot ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Daten zu manipulieren oder offenzulegen oder authentifizierte Benutzer zu kapern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1263