https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:56:09.132283+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-126478 EUVD-2026-126478 2026-10-03T18:56:09.136097+00:00 EUVD-2026-126478 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1270 fkie_cve-2008-1270 2026-10-03T18:56:09.136131+00:00

mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.

 https://cve.radiocsirt.org/vuln/ghsa-r872-9mqq-9xpp GHSA-r872-9mqq-9xpp 2026-10-03T18:56:09.136162+00:00

mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.

 https://cve.radiocsirt.org/vuln/gsd-2008-1270 gsd-2008-1270 2026-10-03T18:56:09.136179+00:00 gsd-2008-1270 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10585-1 openSUSE-SU-2024:10585-1 — lighttpd-1.4.59-2.1 on GA media 2026-10-03T18:56:09.136192+00:00

lighttpd-1.4.59-2.1 on GA media