https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:35:45.489477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254627 EUVD-2026-254627 2026-10-04T14:35:45.541925+00:00 EUVD-2026-254627 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62292 fkie_cve-2025-62292 2026-10-04T14:35:45.541961+00:00

In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts.

 https://cve.radiocsirt.org/vuln/ghsa-8x4q-773g-q756 GHSA-8x4q-773g-q756 2026-10-04T14:35:45.541993+00:00

In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2259 WID-SEC-W-2025-2259 — SonarSource SonarQube: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T14:35:45.542010+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SonarSource SonarQube ausnutzen, um Informationen offenzulegen.