https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:20:16.221748+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265203 EUVD-2026-265203 2026-10-04T07:20:16.224446+00:00 EUVD-2026-265203 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22235 fkie_cve-2026-22235 2026-10-04T07:20:16.224477+00:00

OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files.

 https://cve.radiocsirt.org/vuln/ghsa-v7w8-9cgx-wgv4 GHSA-v7w8-9cgx-wgv4 2026-10-04T07:20:16.224507+00:00

OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files.

 https://cve.radiocsirt.org/vuln/va-26-008-02 VA-26-008-02 — OPEXUS eComplaint and eCasePortal IDOR 2026-10-04T07:20:16.224524+00:00

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files. OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files.