https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T22:37:59.182984+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-04988 cnvd-2022-04988 2026-10-23T22:37:59.189258+00:00 cnvd-2022-04988 https://cve.radiocsirt.org/vuln/euvd-2026-31869 EUVD-2026-31869 2026-10-23T22:37:59.189297+00:00 EUVD-2026-31869 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41767 fkie_cve-2021-41767 2026-10-23T22:37:59.189312+00:00

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's active use of that same connection.

 https://cve.radiocsirt.org/vuln/ghsa-8jvg-8759-x9j6 GHSA-8jvg-8759-x9j6 — Exposure of Sensitive Information to an Unauthorized Actor in Apache Guacamole 2026-10-23T22:37:59.189344+00:00

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's active use of that same connection.

 https://cve.radiocsirt.org/vuln/gsd-2021-41767 gsd-2021-41767 2026-10-23T22:37:59.189363+00:00 gsd-2021-41767 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41767 UBUNTU-CVE-2021-41767 2026-10-23T22:37:59.189374+00:00

Affected: Ubuntu:16.04:LTS: guacamole-server, Ubuntu:18.04:LTS: guacamole-server, Ubuntu:22.04:LTS: guacamole-server, Ubuntu:24.04:LTS: guacamole-server

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's active use of that same connection.