https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:16:55.545647+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08680 bdu:2025-08680 2026-10-06T09:16:55.548188+00:00 bdu:2025-08680 https://cve.radiocsirt.org/vuln/euvd-2026-246311 EUVD-2026-246311 2026-10-06T09:16:55.548219+00:00 EUVD-2026-246311 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27022 fkie_cve-2025-27022 2026-10-06T09:16:55.548233+00:00

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.

Details:

Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.

 https://cve.radiocsirt.org/vuln/ghsa-g7cx-36jq-75p8 GHSA-g7cx-36jq-75p8 2026-10-06T09:16:55.548263+00:00

Path traversal in WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.

Details:

Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.