https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:06:06 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0488 certfr-2026-avi-0488 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0488 https://cve.radiocsirt.org/vuln/cleanstart-2026-mx72251 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cloud-config-server</p> <p>Package cloud-config-server version 5.0.4-r0 fixes 14 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cloud-config-server</p> <p>Package cloud-config-server version 5.0.4-r0 fixes 14 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-mx72251 https://cve.radiocsirt.org/vuln/euvd-2026-337264 EUVD-2026-337264 https://cve.radiocsirt.org/vuln/euvd-2026-337264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40976 <p>In certain circumstances, Spring Boot&#39;s default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> <p>In certain circumstances, Spring Boot&#39;s default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40976 https://cve.radiocsirt.org/vuln/ghsa-8v8j-3hxp-93wr <p><strong>Affected:</strong> Maven: org.springframework.boot:spring-boot</p> <p>In certain circumstances, Spring Boot&#39;s default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> <p><strong>Affected:</strong> Maven: org.springframework.boot:spring-boot</p> <p>In certain circumstances, Spring Boot&#39;s default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> https://cve.radiocsirt.org/vuln/ghsa-8v8j-3hxp-93wr https://cve.radiocsirt.org/vuln/ncsc-2026-0256 NCSC-2026-0256 https://cve.radiocsirt.org/vuln/ncsc-2026-0256 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1263 <p>Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Boot ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Daten zu manipulieren oder offenzulegen oder authentifizierte Benutzer zu kapern.</p> <p>Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Boot ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Daten zu manipulieren oder offenzulegen oder authentifizierte Benutzer zu kapern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1263