https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:44:29.729267+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-48916 CVE-2024-48916 — Ceph is vulnerable to authentication bypass through RadosGW 2026-09-28T19:44:29.731285+00:00

Affected: ceph

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.

 https://vulnerability.circl.lu/vuln/usn-7182-1 USN-7182-1 — ceph vulnerability 2026-09-28T19:44:29.731369+00:00

Affected: Ubuntu:22.04:LTS: ceph, Ubuntu:24.04:LTS: ceph

It was discovered that Ceph incorrectly handled unsupported JWT algorithms in the RadosGW gateway. An attacker could possibly use this issue to bypass certain authentication checks and restrictions.