https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:26:58.491611+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-68547 cnvd-2022-68547 2026-10-09T19:26:58.543356+00:00 cnvd-2022-68547 https://cve.radiocsirt.org/vuln/euvd-2026-13342 EUVD-2026-13342 2026-10-09T19:26:58.543395+00:00 EUVD-2026-13342 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22107 fkie_cve-2022-22107 2026-10-09T19:26:58.543409+00:00

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the calendar at all.

 https://cve.radiocsirt.org/vuln/ghsa-44gv-fgcj-w546 GHSA-44gv-fgcj-w546 — Missing Authorization in DayByDay CRM 2026-10-09T19:26:58.543440+00:00

Affected: Packagist: bottelet/flarepoint

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the calendar at all.

 https://cve.radiocsirt.org/vuln/gsd-2022-22107 gsd-2022-22107 2026-10-09T19:26:58.543464+00:00 gsd-2022-22107