Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:31:02 +0000 certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 EUVD-2026-320168 https://cve.radiocsirt.org/vuln/euvd-2026-320168 EUVD-2026-320168 https://cve.radiocsirt.org/vuln/euvd-2026-320168 fkie_cve-2026-44618 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44618 <p>Insecure XML parser configuration in Apache CXF&#39;s WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.</p> <p>Insecure XML parser configuration in Apache CXF&#39;s WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44618 GHSA-vmm5-fjgx-2jhp — Apache CXF's WS-Transfer module has an insecure XML parser configuration https://cve.radiocsirt.org/vuln/ghsa-vmm5-fjgx-2jhp <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-ws-transfer</p> <p>Insecure XML parser configuration in Apache CXF&#39;s WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-ws-transfer</p> <p>Insecure XML parser configuration in Apache CXF&#39;s WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-vmm5-fjgx-2jhp WID-SEC-W-2026-1659 — Apache CXF: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1659 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1659