https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T17:07:53.449930+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111769 EUVD-2026-111769 2026-10-16T17:07:53.527844+00:00 EUVD-2026-111769 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3359 fkie_cve-2012-3359 2026-10-16T17:07:53.527888+00:00

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.

 https://cve.radiocsirt.org/vuln/ghsa-865x-x787-2cjj GHSA-865x-x787-2cjj 2026-10-16T17:07:53.527936+00:00

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.

 https://cve.radiocsirt.org/vuln/gsd-2012-3359 gsd-2012-3359 2026-10-16T17:07:53.527985+00:00 gsd-2012-3359 https://cve.radiocsirt.org/vuln/rhsa-2013:0128 RHSA-2013:0128 — Red Hat Security Advisory: conga security, bug fix, and enhancement update 2026-10-16T17:07:53.528024+00:00

conga: insecure handling of luci web interface sessions