https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:34:38.896743+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-162203 EUVD-2026-162203 2026-10-06T13:34:38.899407+00:00 EUVD-2026-162203 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51772 fkie_cve-2023-51772 2026-10-06T13:34:38.899440+00:00

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a session timeout, click on the Help icon, observe that there is a browser window for the One Identity website, navigate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT AUTHORITY\SYSTEM.

 https://cve.radiocsirt.org/vuln/ghsa-vjxw-62pr-vrfg GHSA-vjxw-62pr-vrfg 2026-10-06T13:34:38.899472+00:00

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a session timeout, click on the Help icon, observe that there is a browser window for the One Identity website, navigate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT AUTHORITY\SYSTEM.

 https://cve.radiocsirt.org/vuln/gsd-2023-51772 gsd-2023-51772 2026-10-06T13:34:38.899490+00:00 gsd-2023-51772