https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:51:49.481520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4916 ALSA-2021:4916 — Important: mailman:2.1 security update 2026-10-04T01:51:49.898094+00:00

Affected: AlmaLinux:8: mailman

Mailman is a program used to help manage e-mail discussion lists.

Security Fix(es):

* mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover (CVE-2021-44227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-00592 bdu:2022-00592 2026-10-04T01:51:49.898157+00:00 bdu:2022-00592 https://cve.radiocsirt.org/vuln/euvd-2026-32859 EUVD-2026-32859 2026-10-04T01:51:49.898174+00:00 EUVD-2026-32859 https://cve.radiocsirt.org/vuln/fkie_cve-2021-44227 fkie_cve-2021-44227 2026-10-04T01:51:49.898186+00:00

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

 https://cve.radiocsirt.org/vuln/ghsa-xq58-69h2-765m GHSA-xq58-69h2-765m — Cross Site Request Forgery in mailman 2026-10-04T01:51:49.898209+00:00

Affected: PyPI: mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

 https://cve.radiocsirt.org/vuln/gsd-2021-44227 gsd-2021-44227 2026-10-04T01:51:49.898229+00:00 gsd-2021-44227 https://cve.radiocsirt.org/vuln/oesa-2021-1456 OESA-2021-1456 — mailman security update 2026-10-04T01:51:49.898240+00:00

Affected: openEuler:20.03-LTS-SP1: mailman, openEuler:20.03-LTS-SP2: mailman

The GNU mailing list manager. Security Fix(es): In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.(CVE-2021-44227)

 https://cve.radiocsirt.org/vuln/pysec-2026-660 PYSEC-2026-660 — Cross Site Request Forgery in mailman 2026-10-04T01:51:49.898261+00:00

Affected: PyPI: mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

 https://cve.radiocsirt.org/vuln/rhsa-2021:4913 RHSA-2021:4913 — Red Hat Security Advisory: mailman security update 2026-10-04T01:51:49.898278+00:00

mailman: CSRF protection missing in the user options page mailman: CSRF token bypass allows to perform CSRF attacks and account takeover mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover

 https://cve.radiocsirt.org/vuln/rhsa-2021:4915 RHSA-2021:4915 — Red Hat Security Advisory: mailman:2.1 security update 2026-10-04T01:51:49.898296+00:00

mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover

 https://cve.radiocsirt.org/vuln/suse-su-2022:1886-1 SUSE-SU-2022:1886-1 — Security update for mailman 2026-10-04T01:51:49.898310+00:00

Security update for mailman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-44227 UBUNTU-CVE-2021-44227 2026-10-04T01:51:49.898324+00:00

Affected: Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:Pro:20.04:LTS: mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0245 WID-SEC-W-2022-0245 — GNU Mailman: Schwachstelle ermöglicht Privilegieneskalation 2026-10-04T01:51:49.898344+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in GNU Mailman ausnutzen, um seine Privilegien zu erhöhen.