https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:19:43.472044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-74067 cnvd-2020-74067 2026-10-08T23:19:43.538721+00:00 cnvd-2020-74067 https://cve.radiocsirt.org/vuln/euvd-2026-45987 EUVD-2026-45987 2026-10-08T23:19:43.538761+00:00 EUVD-2026-45987 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26177 fkie_cve-2020-26177 2026-10-08T23:19:43.538776+00:00

In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restriction is only applied client-side. Manipulating any of the greyed-out values in requests to /api/profile is not prohibited server-side.

 https://cve.radiocsirt.org/vuln/ghsa-5wh3-x3rh-6qff GHSA-5wh3-x3rh-6qff 2026-10-08T23:19:43.538808+00:00

In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restriction is only applied client-side. Manipulating any of the greyed-out values in requests to /api/profile is not prohibited server-side.

 https://cve.radiocsirt.org/vuln/gsd-2020-26177 gsd-2020-26177 2026-10-08T23:19:43.538825+00:00 gsd-2020-26177