https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T00:18:52.627553+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-28373 cnvd-2021-28373 2026-10-13T00:18:52.630711+00:00 cnvd-2021-28373 https://cve.radiocsirt.org/vuln/euvd-2026-26838 EUVD-2026-26838 2026-10-13T00:18:52.630741+00:00 EUVD-2026-26838 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30463 fkie_cve-2021-30463 2026-10-13T00:18:52.630754+00:00

VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely.

 https://cve.radiocsirt.org/vuln/ghsa-58p9-fwrr-259c GHSA-58p9-fwrr-259c 2026-10-13T00:18:52.630784+00:00

VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely.

 https://cve.radiocsirt.org/vuln/gsd-2021-30463 gsd-2021-30463 2026-10-13T00:18:52.630801+00:00 gsd-2021-30463