https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:32:55.727569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281249 EUVD-2026-281249 2026-10-06T10:32:55.779092+00:00 EUVD-2026-281249 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20628 fkie_cve-2025-20628 2026-10-06T10:32:55.779135+00:00

An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules for Remote Connector Servers (RCS) running in client mode. This means attackers can spoof a client-mode RCS (if one exists) to intercept and/or modify an identity’s security-relevant properties, such as passwords and account recovery information. This issue is exploitable only when an RCS is configured to run in client mode.

 https://cve.radiocsirt.org/vuln/ghsa-wgxh-fmm3-r6v6 GHSA-wgxh-fmm3-r6v6 2026-10-06T10:32:55.779176+00:00

An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules for Remote Connector Servers (RCS) running in client mode. This means attackers can spoof a client-mode RCS (if one exists) to intercept and/or modify an identity’s security-relevant properties, such as passwords and account recovery information. This issue is exploitable only when an RCS is configured to run in client mode.