https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:16:36.450610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-27370 EUVD-2026-27370 2026-10-04T03:16:36.453252+00:00 EUVD-2026-27370 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31232 fkie_cve-2021-31232 2026-10-04T03:16:36.453283+00:00

The Alertmanager in CNCF Cortex before 1.8.1 has a local file disclosure vulnerability when -experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list.

 https://cve.radiocsirt.org/vuln/ghsa-m45g-f45x-vv22 GHSA-m45g-f45x-vv22 — Improper input validation in CNCF Cortex 2026-10-04T03:16:36.453315+00:00

Affected: Go: github.com/cortexproject/cortex

The Alertmanager in CNCF Cortex before 1.8.1 has a local file disclosure vulnerability when -experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list.

 https://cve.radiocsirt.org/vuln/gsd-2021-31232 gsd-2021-31232 2026-10-04T03:16:36.453340+00:00 gsd-2021-31232