https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:12:55.861061+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-163656 EUVD-2026-163656 2026-10-02T13:12:55.917487+00:00 EUVD-2026-163656 https://cve.radiocsirt.org/vuln/fkie_cve-2009-5076 fkie_cve-2009-5076 2026-10-02T13:12:55.917522+00:00

CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.

 https://cve.radiocsirt.org/vuln/ghsa-x6gv-2r2j-q73m GHSA-x6gv-2r2j-q73m 2026-10-02T13:12:55.917555+00:00

CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009.

 https://cve.radiocsirt.org/vuln/gsd-2009-5076 gsd-2009-5076 2026-10-02T13:12:55.917574+00:00 gsd-2009-5076