https://127.0.0.1:10001/cna-root/redhat/recent 2026-10-03T16:09:15.054558+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. https://127.0.0.1:10001/vuln/cve-2026-105105 2026-10-03T11:55:44.853000+00:00 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

2026-10-03T11:55:44.853000+00:00 https://127.0.0.1:10001/vuln/cve-2026-104988 2026-10-02T19:34:33.328000+00:00 Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject

Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject

2026-10-02T19:34:33.328000+00:00 https://127.0.0.1:10001/vuln/cve-2026-94422 2026-10-02T13:54:10.589000+00:00 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

2026-10-02T13:54:10.589000+00:00 https://127.0.0.1:10001/vuln/cve-2026-95512 2026-10-02T09:05:11.245000+00:00 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

2026-10-02T09:05:11.245000+00:00 https://127.0.0.1:10001/vuln/cve-2026-86345 2026-10-01T23:27:47.752000+00:00 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

2026-10-01T23:27:47.752000+00:00 https://127.0.0.1:10001/vuln/cve-2026-86344 2026-10-01T21:29:55.877000+00:00 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

2026-10-01T21:29:55.877000+00:00 https://127.0.0.1:10001/vuln/cve-2026-103484 2026-10-01T19:49:03.670000+00:00 pgvector buffer overflow in IVFFlat index build

pgvector buffer overflow in IVFFlat index build

2026-10-01T19:49:03.670000+00:00 https://127.0.0.1:10001/vuln/cve-2026-103884 2026-10-01T17:16:21.093000+00:00 Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read

Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read

2026-10-01T17:16:21.093000+00:00 https://127.0.0.1:10001/vuln/cve-2026-56098 2026-10-01T17:14:56.199000+00:00 Rubygem-katello: improper authorization logic allows resource enumeration

Rubygem-katello: improper authorization logic allows resource enumeration

2026-10-01T17:14:56.199000+00:00 https://127.0.0.1:10001/vuln/cve-2026-56097 2026-10-01T17:14:50.454000+00:00 Rubygem-katello: sql injection in registry proxy via labels

Rubygem-katello: sql injection in registry proxy via labels

2026-10-01T17:14:50.454000+00:00