https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:52:19.515979+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-321328 EUVD-2026-321328 2026-10-10T14:52:19.518357+00:00 EUVD-2026-321328 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25350 fkie_cve-2018-25350 2026-10-10T14:52:19.518399+00:00

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing accounts in the system.

 https://cve.radiocsirt.org/vuln/ghsa-56j3-w2r5-qgxq GHSA-56j3-w2r5-qgxq 2026-10-10T14:52:19.518451+00:00

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing accounts in the system.