https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T02:46:10.357645+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-189875 EUVD-2026-189875 2026-10-15T02:46:10.418158+00:00 EUVD-2026-189875 https://cve.radiocsirt.org/vuln/fkie_cve-2024-46097 fkie_cve-2024-46097 2026-10-15T02:46:10.418207+00:00

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges.

 https://cve.radiocsirt.org/vuln/ghsa-wwq9-rfhf-r6h9 GHSA-wwq9-rfhf-r6h9 2026-10-15T02:46:10.418275+00:00

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges.