https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T18:36:15.550720+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-authentik-2024-11623 BIT-authentik-2024-11623 — Stored XSS in authentik 2026-10-14T18:36:15.553206+00:00

Affected: Bitnami: authentik

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons.  This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release.

 https://cve.radiocsirt.org/vuln/euvd-2026-215055 EUVD-2026-215055 2026-10-14T18:36:15.553258+00:00 EUVD-2026-215055 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11623 fkie_cve-2024-11623 2026-10-14T18:36:15.553273+00:00

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons.  This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release.

 https://cve.radiocsirt.org/vuln/ghsa-f8wx-qvvq-mwx4 GHSA-f8wx-qvvq-mwx4 2026-10-14T18:36:15.553296+00:00

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons.  This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release.