https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:13:28.809764+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107579 EUVD-2026-107579 2026-10-15T21:13:28.895204+00:00 EUVD-2026-107579 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4481 fkie_cve-2013-4481 2026-10-15T21:13:28.895246+00:00

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

 https://cve.radiocsirt.org/vuln/ghsa-ffhg-m72p-75j9 GHSA-ffhg-m72p-75j9 2026-10-15T21:13:28.895290+00:00

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

 https://cve.radiocsirt.org/vuln/gsd-2013-4481 gsd-2013-4481 2026-10-15T21:13:28.895319+00:00 gsd-2013-4481 https://cve.radiocsirt.org/vuln/rhsa-2013:1603 RHSA-2013:1603 — Red Hat Security Advisory: luci security, bug fix, and enhancement update 2026-10-15T21:13:28.895338+00:00

luci: short exposure of authentication secrets while generating configuration file luci: paster hidden untrusted path and "command" (callable association) injection