https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T13:56:02.002298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-8520 EUVD-2026-8520 2026-10-16T13:56:02.004910+00:00 EUVD-2026-8520 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32064 fkie_cve-2023-32064 2026-10-16T13:56:02.004941+00:00

OroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.11 and 5.1.1.

 https://cve.radiocsirt.org/vuln/ghsa-8gwj-68w6-7v6c GHSA-8gwj-68w6-7v6c — OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility 2026-10-16T13:56:02.004970+00:00

Affected: Packagist: oro/customer-portal

Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks.

 https://cve.radiocsirt.org/vuln/gsd-2023-32064 gsd-2023-32064 2026-10-16T13:56:02.004995+00:00 gsd-2023-32064