https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:48:54.977438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00084 bdu:2025-00084 2026-10-04T20:48:54.982022+00:00 bdu:2025-00084 https://cve.radiocsirt.org/vuln/bit-superset-2024-53949 BIT-superset-2024-53949 — Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled 2026-10-04T20:48:54.982051+00:00

Affected: Bitnami: superset

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allows for lower privilege users to use this API.

issue affects Apache Superset: from 2.0.0 before 4.1.0.

Users are recommended to upgrade to version 4.1.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cnvd-2025-03545 cnvd-2025-03545 2026-10-04T20:48:54.982086+00:00 cnvd-2025-03545 https://cve.radiocsirt.org/vuln/euvd-2026-214801 EUVD-2026-214801 2026-10-04T20:48:54.982101+00:00 EUVD-2026-214801 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53949 fkie_cve-2024-53949 2026-10-04T20:48:54.982111+00:00

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allows for lower privilege users to use this API.

issue affects Apache Superset: from 2.0.0 before 4.1.0.

Users are recommended to upgrade to version 4.1.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-35fc-9hrj-3585 GHSA-35fc-9hrj-3585 — Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled 2026-10-04T20:48:54.982134+00:00

Affected: PyPI: apache-superset

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allows for lower privilege users to use this API.

issue affects Apache Superset: from 2.0.0 before 4.1.0.

Users are recommended to upgrade to version 4.1.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-1156 PYSEC-2026-1156 — Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled 2026-10-04T20:48:54.982155+00:00

Affected: PyPI: apache-superset

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allows for lower privilege users to use this API.

issue affects Apache Superset: from 2.0.0 before 4.1.0.

Users are recommended to upgrade to version 4.1.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3641 WID-SEC-W-2024-3641 — Apache Superset: Mehrere Schwachstellen 2026-10-04T20:48:54.982173+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um sich erweiterte Rechte zu verschaffen, Daten zu manipulieren und Metadaten aus Analysedatenbanken offenzulegen.