https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:05:21.489137+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-68551 cnvd-2022-68551 2026-10-09T16:05:21.554410+00:00 cnvd-2022-68551 https://cve.radiocsirt.org/vuln/euvd-2026-13379 EUVD-2026-13379 2026-10-09T16:05:21.554449+00:00 EUVD-2026-13379 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22111 fkie_cve-2022-22111 2026-10-09T16:05:21.554464+00:00

In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain access to the highest privileged user in the application.

 https://cve.radiocsirt.org/vuln/ghsa-w6rp-4vj7-v2m8 GHSA-w6rp-4vj7-v2m8 — Missing Authorization in DayByDay CRM 2026-10-09T16:05:21.554497+00:00

Affected: Packagist: bottelet/flarepoint

In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain access to the highest privileged user in the application.

 https://cve.radiocsirt.org/vuln/gsd-2022-22111 gsd-2022-22111 2026-10-09T16:05:21.554533+00:00 gsd-2022-22111