https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:16:39.002446+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-05917 bdu:2021-05917 2026-10-04T15:16:39.006630+00:00 bdu:2021-05917 https://cve.radiocsirt.org/vuln/certfr-2021-avi-863 certfr-2021-avi-863 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Microsoft</span>. Elles permettent… 2026-10-04T15:16:39.006661+00:00 certfr-2021-avi-863 https://cve.radiocsirt.org/vuln/euvd-2026-355957 EUVD-2026-355957 2026-10-04T15:16:39.006680+00:00 EUVD-2026-355957 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41372 fkie_cve-2021-41372 2026-10-04T15:16:39.006692+00:00

A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates files to the server using the victim's session and run scripts in the security context of the user and perform privilege escalation in case the victim has admin privileges when the victim access one of the HTML files present in the malicious Power BI template uploaded. The security update addresses the vulnerability by helping to ensure that Power BI Report Server properly sanitize file uploads.

 https://cve.radiocsirt.org/vuln/ghsa-3w9m-7j3j-w9p6 GHSA-3w9m-7j3j-w9p6 2026-10-04T15:16:39.006723+00:00

Power BI Report Server Spoofing Vulnerability

 https://cve.radiocsirt.org/vuln/gsd-2021-41372 gsd-2021-41372 2026-10-04T15:16:39.006738+00:00 gsd-2021-41372 https://cve.radiocsirt.org/vuln/msrc_cve-2021-41372 msrc_CVE-2021-41372 — Power BI Report Server Spoofing Vulnerability 2026-10-04T15:16:39.006748+00:00 msrc_CVE-2021-41372