https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:10:14.781571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10720 bdu:2025-10720 2026-10-06T23:10:14.784419+00:00 bdu:2025-10720 https://cve.radiocsirt.org/vuln/euvd-2026-221297 EUVD-2026-221297 2026-10-06T23:10:14.784452+00:00 EUVD-2026-221297 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27604 fkie_cve-2025-27604 2026-10-06T23:10:14.784466+00:00

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.

 https://cve.radiocsirt.org/vuln/ghsa-3w9f-2pph-j5vc GHSA-3w9f-2pph-j5vc — com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public 2026-10-06T23:10:14.784495+00:00

Affected: Maven: com.xwiki.confluencepro:application-confluence-migrator-pro-ui

### Impact The homepage of the application is public which enables a guest to download the package which might contain sensitive information.

### Patches 1.11.7

### Workarounds The access to the page can be manually restricted to a specific set of users or groups.