https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:18:35.866929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2735 EUVD-2026-2735 2026-10-05T22:18:35.913752+00:00 EUVD-2026-2735 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4839 fkie_cve-2024-4839 2026-10-05T22:18:35.913789+00:00

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service (under construction), XTTS service, Petals service, vLLM service, and Motion Ctrl service, which lack CSRF protection. This vulnerability allows attackers to deceive users into unwittingly installing the XTTS service among other packages by submitting a malicious installation request. Successful exploitation results in attackers tricking users into performing actions without their consent.

 https://cve.radiocsirt.org/vuln/ghsa-v2f9-5493-gg7h GHSA-v2f9-5493-gg7h 2026-10-05T22:18:35.913826+00:00

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service (under construction), XTTS service, Petals service, vLLM service, and Motion Ctrl service, which lack CSRF protection. This vulnerability allows attackers to deceive users into unwittingly installing the XTTS service among other packages by submitting a malicious installation request. Successful exploitation results in attackers tricking users into performing actions without their consent.