https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:20:44.395625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-30262 cnvd-2019-30262 2026-10-02T12:20:44.399048+00:00 cnvd-2019-30262 https://cve.radiocsirt.org/vuln/euvd-2026-68613 EUVD-2026-68613 2026-10-02T12:20:44.399094+00:00 EUVD-2026-68613 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17283 fkie_cve-2018-17283 2026-10-02T12:20:44.399115+00:00

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter.

 https://cve.radiocsirt.org/vuln/ghsa-44v2-pxvh-gf8w GHSA-44v2-pxvh-gf8w 2026-10-02T12:20:44.399155+00:00

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter.

 https://cve.radiocsirt.org/vuln/gsd-2018-17283 gsd-2018-17283 2026-10-02T12:20:44.399182+00:00 gsd-2018-17283