https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T16:06:35.955840+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02086 bdu:2024-02086 2026-10-24T16:06:35.959785+00:00 bdu:2024-02086 https://cve.radiocsirt.org/vuln/euvd-2026-158412 EUVD-2026-158412 2026-10-24T16:06:35.959816+00:00 EUVD-2026-158412 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25830 fkie_cve-2024-25830 2026-10-24T16:06:35.959829+00:00

F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.

 https://cve.radiocsirt.org/vuln/ghsa-h8r9-fvmc-wrrc GHSA-h8r9-fvmc-wrrc 2026-10-24T16:06:35.959857+00:00

F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.

 https://cve.radiocsirt.org/vuln/gsd-2024-25830 gsd-2024-25830 2026-10-24T16:06:35.959873+00:00 gsd-2024-25830 https://cve.radiocsirt.org/vuln/jvndb-2024-003187 jvndb-2024-003187 2026-10-24T16:06:35.959883+00:00

DataCube provided by Field Logic Inc. contains multiple vulnerabilities listed below. * Direct Request ('Forced Browsing') (CWE-425) - CVE-2024-25830 * Reflected cross-site scripting (CWE-79) - CVE-2024-25831 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2024-25832 * SQL injection (CWE-89) - CVE-2024-25833 CVE-2024-25830, CVE-2024-25831, CVE-2024-25832, CVE-2024-25833 Thomas J. Knudsen and Samy Younsi of NeroTeam Security Labs reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2024-25832 CV3TR4CK reported this vulnerability to JPCERT/CC during the coordination based on the above report.