https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:58:58.503028+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21853 EUVD-2026-21853 2026-10-06T20:58:58.524641+00:00 EUVD-2026-21853 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20786 fkie_cve-2021-20786 2026-10-06T20:58:58.524678+00:00

Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to hijack the authentication of administrators via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-crxm-j8cj-fgm7 GHSA-crxm-j8cj-fgm7 2026-10-06T20:58:58.524712+00:00

Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to hijack the authentication of administrators via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2021-20786 gsd-2021-20786 2026-10-06T20:58:58.524730+00:00 gsd-2021-20786 https://cve.radiocsirt.org/vuln/jvndb-2021-000070 jvndb-2021-000070 2026-10-06T20:58:58.524742+00:00

GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. *Cross-site scripting vulnerability (CWE-79) - CVE-2021-20785 *Cross-site request forgery (CWE-352) - CVE-2021-20786 *Cross-site scripting vulnerability (CWE-79) - CVE-2021-20787 *Sever-side request forgery (CWE-918) - CVE-2021-20788 *Open redirect (CWE-601) - CVE-2021-20789 CVE-2021-20785, CVE-2021-20786 ASAI Ken reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20787, CVE-2021-20788, CVE-2021-20789 Ryo Sato of BroadBand Security,Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.