https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:20:53.846561+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-258583 EUVD-2026-258583 2026-10-03T23:20:53.913738+00:00 EUVD-2026-258583 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28143 fkie_cve-2024-28143 2026-10-03T23:20:53.913778+00:00

The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attacker can use this to forcefully set a new password within the -rsetpass+-aaction+- parameter for a user without knowing the old password, e.g. by exploiting a CSRF issue.

 https://cve.radiocsirt.org/vuln/ghsa-224h-vf26-wvfw GHSA-224h-vf26-wvfw 2026-10-03T23:20:53.913813+00:00

The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attacker can use this to forcefully set a new password within the -rsetpass+-aaction+- parameter for a user without knowing the old password, e.g. by exploiting a CSRF issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-28143 gsd-2024-28143 2026-10-03T23:20:53.913830+00:00 gsd-2024-28143