https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:44:03.881374+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-13740 bdu:2025-13740 2026-10-15T23:44:03.955920+00:00 bdu:2025-13740 https://cve.radiocsirt.org/vuln/euvd-2026-333180 EUVD-2026-333180 2026-10-15T23:44:03.955979+00:00 EUVD-2026-333180 https://cve.radiocsirt.org/vuln/fkie_cve-2025-65318 fkie_cve-2025-65318 2026-10-15T23:44:03.955996+00:00

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.

 https://cve.radiocsirt.org/vuln/ghsa-w2r9-w6fr-cq88 GHSA-w2r9-w6fr-cq88 2026-10-15T23:44:03.956026+00:00

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.