https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:02:07.207798+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00046 bdu:2026-00046 2026-10-06T14:02:07.210842+00:00 bdu:2026-00046 https://cve.radiocsirt.org/vuln/euvd-2026-222618 EUVD-2026-222618 2026-10-06T14:02:07.210880+00:00 EUVD-2026-222618 https://cve.radiocsirt.org/vuln/fkie_cve-2025-29998 fkie_cve-2025-29998 2026-10-06T14:02:07.210900+00:00

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP bombing/flooding on the targeted system.

 https://cve.radiocsirt.org/vuln/ghsa-cwqf-2qf9-9mh4 GHSA-cwqf-2qf9-9mh4 2026-10-06T14:02:07.210939+00:00

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP bombing/flooding on the targeted system.