https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:15:45.774085+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207786 EUVD-2026-207786 2026-10-13T03:15:45.781408+00:00 EUVD-2026-207786 https://cve.radiocsirt.org/vuln/fkie_cve-2024-54450 fkie_cve-2024-54450 2026-10-13T03:15:45.781440+00:00

An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the (possibly forged) IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP address can later be displayed in the My Account popup that shows the IP address that was used to log in.

 https://cve.radiocsirt.org/vuln/ghsa-9rf3-44g3-h94q GHSA-9rf3-44g3-h94q 2026-10-13T03:15:45.781473+00:00

An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the (possibly forged) IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP address can later be displayed in the My Account popup that shows the IP address that was used to log in.