https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T08:11:10.243032+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-42550 CVE-2021-42550 — RCE from attacker with configuration edit priviledges through JNDI lookup 2026-10-04T08:11:10.683523+00:00

Affected: QOS.ch logback

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

 https://vulnerability.circl.lu/vuln/usn-7616-1 USN-7616-1 — logback vulnerabilities 2026-10-04T08:11:10.683703+00:00

Affected: Ubuntu:Pro:16.04:LTS: logback, Ubuntu:Pro:18.04:LTS: logback, Ubuntu:Pro:20.04:LTS: logback, Ubuntu:Pro:22.04:LTS: logback

It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-42550) It was discovered that logback contained a serialization vulnerability. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-6378)