https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:09:32 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-yw87633 <p><strong>Affected:</strong> CleanStart: activemq, CleanStart: cassandra-reaper-fips</p> <p>CVE-2026-43827 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: activemq, CleanStart: cassandra-reaper-fips</p> <p>CVE-2026-43827 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-yw87633 https://cve.radiocsirt.org/vuln/euvd-2026-321271 EUVD-2026-321271 https://cve.radiocsirt.org/vuln/euvd-2026-321271 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43827 <p>Default configurations of Apache Shiro have a session fixation vulnerability.</p> <p>This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.</p> <p>Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.</p> <p>In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.</p> <p>Default configurations of Apache Shiro have a session fixation vulnerability.</p> <p>This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.</p> <p>Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.</p> <p>In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-43827 https://cve.radiocsirt.org/vuln/ghsa-fcvm-3cpj-f9qx <p><strong>Affected:</strong> Maven: org.apache.shiro:shiro-core</p> <p>Default configurations of Apache Shiro have a session fixation vulnerability.</p> <p>This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.</p> <p>Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.</p> <p>In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.</p> <p><strong>Affected:</strong> Maven: org.apache.shiro:shiro-core</p> <p>Default configurations of Apache Shiro have a session fixation vulnerability.</p> <p>This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.</p> <p>Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.</p> <p>In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.</p> https://cve.radiocsirt.org/vuln/ghsa-fcvm-3cpj-f9qx https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43827 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro, Ubuntu:Pro:24.04:LTS: shiro, Ubuntu:25.10: shiro, Ubuntu:26.04:LTS: shiro</p> <p>Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro, Ubuntu:Pro:24.04:LTS: shiro, Ubuntu:25.10: shiro, Ubuntu:26.04:LTS: shiro</p> <p>Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43827