https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:33:45.748402+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-479 certa-2008-avi-479 — Plusieurs vulnérabilités dans Lighttpd peuvent être exploitées par une personne malveillante afin de provoquer un déni… 2026-10-04T01:33:45.753619+00:00 certa-2008-avi-479 https://cve.radiocsirt.org/vuln/euvd-2026-129366 EUVD-2026-129366 2026-10-04T01:33:45.753655+00:00 EUVD-2026-129366 https://cve.radiocsirt.org/vuln/fkie_cve-2008-4360 fkie_cve-2008-4360 2026-10-04T01:33:45.753670+00:00

mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.

 https://cve.radiocsirt.org/vuln/ghsa-73r4-8h5j-2cjg GHSA-73r4-8h5j-2cjg 2026-10-04T01:33:45.753697+00:00

mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.

 https://cve.radiocsirt.org/vuln/gsd-2008-4360 gsd-2008-4360 2026-10-04T01:33:45.753713+00:00 gsd-2008-4360