https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:19:21.386438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218638 EUVD-2026-218638 2026-10-04T01:19:21.388967+00:00 EUVD-2026-218638 https://cve.radiocsirt.org/vuln/fkie_cve-2024-49348 fkie_cve-2024-49348 2026-10-04T01:19:21.389000+00:00

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2

allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly grants access to user queries in an unexpected context.

 https://cve.radiocsirt.org/vuln/ghsa-v3q6-3rrv-r75p GHSA-v3q6-3rrv-r75p 2026-10-04T01:19:21.389034+00:00

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2

allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly grants access to user queries in an unexpected context.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0299 WID-SEC-W-2025-0299 — IBM Business Automation Workflow: Mehrere Schwachstellen 2026-10-04T01:19:21.389052+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service herbeizuführen oder um ein Cross-Site-Scritping auszuführen.