https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:07:01.250758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265670 EUVD-2026-265670 2026-10-08T05:07:01.306503+00:00 EUVD-2026-265670 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14317 fkie_cve-2025-14317 2026-10-08T05:07:01.306549+00:00

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a `loyaltyGuestId` parameter. Server does not verify the permissions required to obtain the data.

This issue was fixed in version 915 (Android) and 7.4.1 (iOS).

 https://cve.radiocsirt.org/vuln/ghsa-v2j2-frq6-6v5g GHSA-v2j2-frq6-6v5g 2026-10-08T05:07:01.306598+00:00

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a `loyaltyGuestId` parameter. Server does not verify the permissions required to obtain the data.

This issue was fixed in version 915 (Android) and 7.4.1 (iOS).