https://cve.radiocsirt.org Latest vulnerabilities published by the CNAs operating under the ENISA root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 07:10:13 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103858 MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions https://cve.radiocsirt.org/vuln/cve-2026-103858 Thu, 01 Oct 2026 11:31:32 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103664 MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter https://cve.radiocsirt.org/vuln/cve-2026-103664 Thu, 01 Oct 2026 08:55:51 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103662 MISP Reflected XSS in Taxonomy Tag Confirmation Forms MISP Reflected XSS in Taxonomy Tag Confirmation Forms https://cve.radiocsirt.org/vuln/cve-2026-103662 Thu, 01 Oct 2026 08:48:38 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes https://cve.radiocsirt.org/vuln/cve-2026-103659 Thu, 01 Oct 2026 08:33:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period https://cve.radiocsirt.org/vuln/cve-2026-103655 Thu, 01 Oct 2026 08:08:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass https://cve.radiocsirt.org/vuln/cve-2026-103651 Thu, 01 Oct 2026 07:34:02 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80275 Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint https://cve.radiocsirt.org/vuln/cve-2026-80275 Thu, 01 Oct 2026 05:51:37 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80276 Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface https://cve.radiocsirt.org/vuln/cve-2026-80276 Thu, 01 Oct 2026 05:51:21 +0000 https://cve.radiocsirt.org/vuln/cve-2026-102490 Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha https://cve.radiocsirt.org/vuln/cve-2026-102490 Wed, 30 Sep 2026 16:21:20 +0000 https://cve.radiocsirt.org/vuln/cve-2026-102489 Undisclosed RCE in Zammad v6.3 and higher Undisclosed RCE in Zammad v6.3 and higher https://cve.radiocsirt.org/vuln/cve-2026-102489 Wed, 30 Sep 2026 16:21:19 +0000