https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:31:32.632969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-12300 EUVD-2026-12300 2026-10-10T14:31:32.635521+00:00 EUVD-2026-12300 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2368 fkie_cve-2022-2368 2026-10-10T14:31:32.635554+00:00

Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.

 https://cve.radiocsirt.org/vuln/ghsa-9wqr-9787-p4rf GHSA-9wqr-9787-p4rf — Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password 2026-10-10T14:31:32.635585+00:00

Affected: Packagist: microweber/microweber

In the login API, an IP address will by default be blocked when the user tries to login incorrectly more than 5 times. However, a bypass to this mechanism is possible by abusing a X-Forwarded-For header to bypass IP detection and perform a password brute-force. A patch for this issue is available in Microweber version 1.2.21.

 https://cve.radiocsirt.org/vuln/gsd-2022-2368 gsd-2022-2368 2026-10-10T14:31:32.635611+00:00 gsd-2022-2368