https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T17:13:39.180788+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-18710 fkie_cve-2026-18710 2026-09-29T17:13:40.948244+00:00

A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.

 https://vulnerability.circl.lu/vuln/rhsa-2026:63302 RHSA-2026:63302 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP1) 2026-09-29T17:13:40.948338+00:00

io.quarkus:quarkus-qute: quarkus-qute:Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine resteasy-core: RESTeasy SourceProvider remote unauthenticated file read org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-18710 UBUNTU-CVE-2026-18710 2026-09-29T17:13:40.948409+00:00

Affected: Ubuntu:16.04:LTS: mongo-java-driver, Ubuntu:18.04:LTS: mongo-java-driver, Ubuntu:20.04:LTS: mongo-java-driver, Ubuntu:22.04:LTS: mongo-java-driver, Ubuntu:24.04:LTS: mongo-java-driver, Ubuntu:26.04:LTS: mongo-java-driver

A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.