https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:52:30.187650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-27576 EUVD-2026-27576 2026-10-04T20:52:30.192638+00:00 EUVD-2026-27576 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31646 fkie_cve-2021-31646 2026-10-04T20:52:30.192672+00:00

Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses a weak algorithm for the generation of password recovery tokens (the PHP uniqueid function), allowing a brute force attack.

 https://cve.radiocsirt.org/vuln/ghsa-whcv-8x9m-33fh GHSA-whcv-8x9m-33fh 2026-10-04T20:52:30.192703+00:00

Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses a weak algorithm for the generation of password recovery tokens (the PHP uniqueid function), allowing a brute force attack.

 https://cve.radiocsirt.org/vuln/gsd-2021-31646 gsd-2021-31646 2026-10-04T20:52:30.192720+00:00 gsd-2021-31646