https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:27:49.318987+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-99303 cnvd-2021-99303 2026-10-09T17:27:49.322871+00:00 cnvd-2021-99303 https://cve.radiocsirt.org/vuln/euvd-2026-30500 EUVD-2026-30500 2026-10-09T17:27:49.322926+00:00 EUVD-2026-30500 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39189 fkie_cve-2021-39189 2026-10-09T17:27:49.322948+00:00

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually.

 https://cve.radiocsirt.org/vuln/ghsa-579x-cjvr-cqj9 GHSA-579x-cjvr-cqj9 — Observable Response Discrepancy in Lost Password Service 2026-10-09T17:27:49.322993+00:00

Affected: Packagist: pimcore/pimcore

### Impact It is possible to enumerate usernames via the forgot password functionality

### Patches Update to version `10.1.3` or apply this patch manually: https://github.com/pimcore/pimcore/pull/10223.patch

### Workarounds Apply https://github.com/pimcore/pimcore/pull/10223.patch manually.

 https://cve.radiocsirt.org/vuln/gsd-2021-39189 gsd-2021-39189 2026-10-09T17:27:49.323032+00:00 gsd-2021-39189