https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:56:17.098417+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-217829 EUVD-2026-217829 2026-10-06T18:56:17.149004+00:00 EUVD-2026-217829 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26372 fkie_cve-2025-26372 2026-10-06T18:56:17.149043+00:00

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users from groups via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-7mr4-qghc-9cw2 GHSA-7mr4-qghc-9cw2 2026-10-06T18:56:17.149078+00:00

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users from groups via crafted HTTP requests.