https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 11:38:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-14217 cnvd-2025-14217 https://cve.radiocsirt.org/vuln/cnvd-2025-14217 https://cve.radiocsirt.org/vuln/euvd-2026-277700 EUVD-2026-277700 https://cve.radiocsirt.org/vuln/euvd-2026-277700 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25209 <p>The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.</p> <p>The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25209 https://cve.radiocsirt.org/vuln/ghsa-vmhw-cqjv-v26j <p>The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.</p> <p>The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.</p> https://cve.radiocsirt.org/vuln/ghsa-vmhw-cqjv-v26j