https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T13:19:18.448590+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-4437 CVE-2016-4437 2026-09-29T13:19:19.123131+00:00

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

 https://vulnerability.circl.lu/vuln/usn-7139-1 USN-7139-1 — shiro vulnerability 2026-09-29T13:19:19.123291+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro

It was discovered that Apache Shiro used a static cipher within the "Remember Me" feature inside authentication by default. An attacker could possibly use this issue to achieve remote code execution or obtain sensitive information.