https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:41:56.131803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-253843 EUVD-2026-253843 2026-10-05T02:41:56.135032+00:00 EUVD-2026-253843 https://cve.radiocsirt.org/vuln/fkie_cve-2025-35041 fkie_cve-2025-35041 2026-10-05T02:41:56.135077+00:00

Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A remote attacker with valid credentials could brute-force the 6-digit MFA code. Fixed in 10.2.35, 11.0.21, and 11.1.9.

 https://cve.radiocsirt.org/vuln/ghsa-9mjj-m5vm-p4jh GHSA-9mjj-m5vm-p4jh 2026-10-05T02:41:56.135124+00:00

Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A remote attacker with valid credentials could brute-force the 6-digit MFA code. Fixed in 10.2.35, 11.0.21, and 11.1.9.

 https://cve.radiocsirt.org/vuln/va-25-265-01 VA-25-265-01 — Airship AI MFA bypass and default credentials vulnerabilities 2026-10-05T02:41:56.135151+00:00

Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A remote attacker with valid credentials could brute-force the 6-digit MFA code. Fixed in 10.2.35, 11.0.21, and 11.1.9. Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. Instances of Airship AI that do not change this account password are vulnerable to a remote attacker logging in and gaining the privileges of this account. Fixed in 10.2.35, 11.0.21, and 11.1.9.