https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T15:21:22.473370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-38618 CVE-2021-38618 2026-10-26T15:21:22.474665+00:00

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.