https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:03:38.710552+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-09103 cnvd-2019-09103 2026-10-09T16:03:38.716534+00:00 cnvd-2019-09103 https://cve.radiocsirt.org/vuln/euvd-2026-69684 EUVD-2026-69684 2026-10-09T16:03:38.716570+00:00 EUVD-2026-69684 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19110 fkie_cve-2018-19110 2026-10-09T16:03:38.716584+00:00

The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check.

 https://cve.radiocsirt.org/vuln/ghsa-3wmg-53g4-p9v4 GHSA-3wmg-53g4-p9v4 2026-10-09T16:03:38.716612+00:00

The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check.

 https://cve.radiocsirt.org/vuln/gsd-2018-19110 gsd-2018-19110 2026-10-09T16:03:38.716628+00:00 gsd-2018-19110