https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:59:36.177992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-35382 cnvd-2017-35382 2026-10-08T20:59:36.243072+00:00 cnvd-2017-35382 https://cve.radiocsirt.org/vuln/euvd-2026-79290 EUVD-2026-79290 2026-10-08T20:59:36.243113+00:00 EUVD-2026-79290 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16935 fkie_cve-2017-16935 2026-10-08T20:59:36.243127+00:00

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account details via a users/search.json request, and then modifying the account via an editUser request.

 https://cve.radiocsirt.org/vuln/ghsa-4x38-6389-m4h2 GHSA-4x38-6389-m4h2 2026-10-08T20:59:36.243157+00:00

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account details via a users/search.json request, and then modifying the account via an editUser request.

 https://cve.radiocsirt.org/vuln/gsd-2017-16935 gsd-2017-16935 2026-10-08T20:59:36.243174+00:00 gsd-2017-16935