https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:56:03.471972+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-68548 cnvd-2022-68548 2026-10-09T17:56:03.542846+00:00 cnvd-2022-68548 https://cve.radiocsirt.org/vuln/euvd-2026-13363 EUVD-2026-13363 2026-10-09T17:56:03.542887+00:00 EUVD-2026-13363 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22108 fkie_cve-2022-22108 2026-10-09T17:56:03.542901+00:00

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of information.

 https://cve.radiocsirt.org/vuln/ghsa-frxp-xxx8-hrg6 GHSA-frxp-xxx8-hrg6 — Missing Authorization in DayByDay CRM 2026-10-09T17:56:03.542931+00:00

Affected: Packagist: bottelet/flarepoint

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of information.

 https://cve.radiocsirt.org/vuln/gsd-2022-22108 gsd-2022-22108 2026-10-09T17:56:03.542955+00:00 gsd-2022-22108