https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:07:30.473658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338418 EUVD-2026-338418 2026-10-03T09:07:30.476858+00:00 EUVD-2026-338418 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62205 fkie_cve-2026-62205 2026-10-03T09:07:30.476895+00:00

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path. The issue is fixed in 2026.6.6.

 https://cve.radiocsirt.org/vuln/ghsa-q7vf-83cx-xc54 GHSA-q7vf-83cx-xc54 2026-10-03T09:07:30.476931+00:00

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path. The issue is fixed in 2026.6.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 WID-SEC-W-2026-2133 — OpenClaw: Mehrere Schwachstellen 2026-10-03T09:07:30.476950+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.