https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:21:26.883274+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-68550 cnvd-2022-68550 2026-10-09T13:21:26.886428+00:00 cnvd-2022-68550 https://cve.radiocsirt.org/vuln/euvd-2026-13378 EUVD-2026-13378 2026-10-09T13:21:26.886462+00:00 EUVD-2026-13378 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22110 fkie_cve-2022-22110 2026-10-09T13:21:26.886476+00:00

In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allow an attacker to brute-force users’ passwords with minimal to no computational effort.

 https://cve.radiocsirt.org/vuln/ghsa-96v6-hrwg-p378 GHSA-96v6-hrwg-p378 — Weak Password Requirements in Daybyday CRM 2026-10-09T13:21:26.886509+00:00

Affected: Packagist: bottelet/flarepoint

In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allow an attacker to brute-force users’ passwords with minimal to no computational effort.

 https://cve.radiocsirt.org/vuln/gsd-2022-22110 gsd-2022-22110 2026-10-09T13:21:26.886534+00:00 gsd-2022-22110