https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:07:50.126405+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187563 EUVD-2026-187563 2026-10-08T01:07:50.216789+00:00 EUVD-2026-187563 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38344 fkie_cve-2023-38344 2026-10-08T01:07:50.216831+00:00

An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.

 https://cve.radiocsirt.org/vuln/ghsa-vhfm-hcpf-g55q GHSA-vhfm-hcpf-g55q 2026-10-08T01:07:50.216866+00:00

An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.

 https://cve.radiocsirt.org/vuln/gsd-2023-38344 gsd-2023-38344 2026-10-08T01:07:50.216884+00:00 gsd-2023-38344 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2421 WID-SEC-W-2023-2421 — Ivanti Endpoint Manager: Mehrere Schwachstellen 2026-10-08T01:07:50.216896+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Informationen offenzulegen oder einen Server Side Request Forgery-Angriff durchzuführen.