https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:41:46 +0000 https://cve.radiocsirt.org/vuln/bit-thrift-2026-43869 <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-thrift-2026-43869 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0991 certfr-2026-avi-0991 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0991 https://cve.radiocsirt.org/vuln/cleanstart-2026-cf06415 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Package apache-hive version 4.2.0-r7 fixes 8 vulnerabilities: CVE-2025-52999, CVE-2025-49128, CVE-2026-43869, ghsa-72hv-8253-57qq, ghsa-5jmj-h7xm-6q6v...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Package apache-hive version 4.2.0-r7 fixes 8 vulnerabilities: CVE-2025-52999, CVE-2025-49128, CVE-2026-43869, ghsa-72hv-8253-57qq, ghsa-5jmj-h7xm-6q6v...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cf06415 https://cve.radiocsirt.org/vuln/euvd-2026-365492 EUVD-2026-365492 https://cve.radiocsirt.org/vuln/euvd-2026-365492 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43869 <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-43869 https://cve.radiocsirt.org/vuln/ghsa-7pwc-h2j2-rjgj <p><strong>Affected:</strong> Maven: org.apache.thrift:libthrift</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version [0.23.0](https://github.com/apache/thrift/releases/tag/v0.23.0), which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.thrift:libthrift</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version [0.23.0](https://github.com/apache/thrift/releases/tag/v0.23.0), which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-7pwc-h2j2-rjgj https://cve.radiocsirt.org/vuln/msrc_cve-2026-43869 msrc_CVE-2026-43869 https://cve.radiocsirt.org/vuln/msrc_cve-2026-43869 https://cve.radiocsirt.org/vuln/rhsa-2026:21769 <p>grafana/tempo: Tempo: Denial of Service via large queries net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via mal…</p> <p>grafana/tempo: Tempo: Denial of Service via large queries net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via mal…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:21769 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43869 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43869 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3043 <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3043