https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:48:38.599110+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-269877 EUVD-2026-269877 2026-10-06T00:48:38.645068+00:00 EUVD-2026-269877 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15560 fkie_cve-2025-15560 2026-10-06T00:48:38.645103+00:00

An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can execute arbitrary SQL statements on the database backend and gain access to sensitive data.

 https://cve.radiocsirt.org/vuln/ghsa-vq94-wmm9-737m GHSA-vq94-wmm9-737m 2026-10-06T00:48:38.645139+00:00

An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can execute arbitrary SQL statements on the database backend and gain access to sensitive data.