https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:04:37.776929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278801 EUVD-2026-278801 2026-10-04T19:04:37.779536+00:00 EUVD-2026-278801 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4820 fkie_cve-2026-4820 2026-10-04T19:04:37.779568+00:00

IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

 https://cve.radiocsirt.org/vuln/ghsa-7cvp-jxjh-qvvf GHSA-7cvp-jxjh-qvvf 2026-10-04T19:04:37.779600+00:00

IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

 https://cve.radiocsirt.org/vuln/va-26-097-02 VA-26-097-02 — IBM Maximo Application Suite Sensitive Tokens without 'Secure' Attribute 2026-10-04T19:04:37.779619+00:00

IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the 'secure' attribute on authorization tokens or session cookies. An unauthenticated attacker can steal cookies by directing users to a malicious http:// link and snooping user traffic. Fixed in 9.1.8, 9.0.19, 8.11.30, and 8.10.33.