https://cve.radiocsirt.org/cna-root/jpcert/recent 2026-10-02T07:10:14.518539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Latest vulnerabilities published by the CNAs operating under the jpcert root of the CVE Program. https://cve.radiocsirt.org/vuln/cve-2026-78249 2026-10-01T07:56:26.289000+00:00 A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

2026-10-01T07:56:26.289000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-82824 2026-10-01T04:57:58.485000+00:00 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted

Path traversal may allow arbitrary files to be viewed, created, modified, or deleted

2026-10-01T04:57:58.485000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-82825 2026-10-01T04:57:57.577000+00:00 Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed

Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed

2026-10-01T04:57:57.577000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-82826 2026-10-01T04:57:56.651000+00:00 Authentication information or sensitive data may be intercepted in transit

Authentication information or sensitive data may be intercepted in transit

2026-10-01T04:57:56.651000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-82827 2026-10-01T04:57:55.728000+00:00 A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

2026-10-01T04:57:55.728000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-82828 2026-10-01T04:57:54.765000+00:00 Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges

Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges

2026-10-01T04:57:54.765000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-82829 2026-10-01T04:57:53.541000+00:00 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process

Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process

2026-10-01T04:57:53.541000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-92873 2026-09-30T07:51:52.401000+00:00 Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

2026-09-30T07:51:52.401000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-92872 2026-09-30T07:47:50.234000+00:00 Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.

Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.

2026-09-30T07:47:50.234000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-92871 2026-09-30T07:47:32.091000+00:00 A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.

2026-09-30T07:47:32.091000+00:00