https://cve.radiocsirt.org Latest vulnerabilities published by the CNAs operating under the jpcert root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 07:10:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-78249 A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing. A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing. https://cve.radiocsirt.org/vuln/cve-2026-78249 Thu, 01 Oct 2026 07:56:26 +0000 https://cve.radiocsirt.org/vuln/cve-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted Path traversal may allow arbitrary files to be viewed, created, modified, or deleted https://cve.radiocsirt.org/vuln/cve-2026-82824 Thu, 01 Oct 2026 04:57:58 +0000 https://cve.radiocsirt.org/vuln/cve-2026-82825 Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed https://cve.radiocsirt.org/vuln/cve-2026-82825 Thu, 01 Oct 2026 04:57:57 +0000 https://cve.radiocsirt.org/vuln/cve-2026-82826 Authentication information or sensitive data may be intercepted in transit Authentication information or sensitive data may be intercepted in transit https://cve.radiocsirt.org/vuln/cve-2026-82826 Thu, 01 Oct 2026 04:57:56 +0000 https://cve.radiocsirt.org/vuln/cve-2026-82827 A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens https://cve.radiocsirt.org/vuln/cve-2026-82827 Thu, 01 Oct 2026 04:57:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-82828 Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges https://cve.radiocsirt.org/vuln/cve-2026-82828 Thu, 01 Oct 2026 04:57:54 +0000 https://cve.radiocsirt.org/vuln/cve-2026-82829 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process https://cve.radiocsirt.org/vuln/cve-2026-82829 Thu, 01 Oct 2026 04:57:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-92873 Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node. Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node. https://cve.radiocsirt.org/vuln/cve-2026-92873 Wed, 30 Sep 2026 07:51:52 +0000 https://cve.radiocsirt.org/vuln/cve-2026-92872 Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. https://cve.radiocsirt.org/vuln/cve-2026-92872 Wed, 30 Sep 2026 07:47:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-92871 A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. https://cve.radiocsirt.org/vuln/cve-2026-92871 Wed, 30 Sep 2026 07:47:32 +0000