https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T09:09:33.623012+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-159 certa-2009-avi-159 — Une vulnérabilité dans <span class="textit">Plone</span> permet à un utilisateur malintentionné de contourner la politi… 2026-10-19T09:09:33.697991+00:00 certa-2009-avi-159 https://cve.radiocsirt.org/vuln/euvd-2026-121810 EUVD-2026-121810 2026-10-19T09:09:33.698033+00:00 EUVD-2026-121810 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0662 fkie_cve-2009-0662 2026-10-19T09:09:33.698048+00:00

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-pq3x-96c3-xgjg GHSA-pq3x-96c3-xgjg — Moderate severity vulnerability that affects Products.PlonePAS 2026-10-19T09:09:33.698076+00:00

Affected: PyPI: Products.PlonePAS

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2009-0662 gsd-2009-0662 2026-10-19T09:09:33.698099+00:00 gsd-2009-0662 https://cve.radiocsirt.org/vuln/pysec-2009-17 PYSEC-2009-17 2026-10-19T09:09:33.698110+00:00

Affected: PyPI: plone

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.