https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:57:17.743193+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246327 EUVD-2026-246327 2026-10-07T03:57:17.791863+00:00 EUVD-2026-246327 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26485 fkie_cve-2025-26485 2026-10-07T03:57:17.791902+00:00

A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts (in case of the usage of a wrong password or a non existent user). The difference in the returned error messages could be used by attackers to understand whether a certain user is registered in the Identity Manager.

This issue affects Life 1st: 1.5.2.14234.

 https://cve.radiocsirt.org/vuln/ghsa-6mx4-qxhj-cjh2 GHSA-6mx4-qxhj-cjh2 2026-10-07T03:57:17.791938+00:00

The Exposure of Sensitive Information to an Unauthorized Actor vulnerability impacting Beta80 Life 1st Identity Manager allows User Enumeration using Authentication Rest APIs. Affected: Life 1st version 1.5.2.14234. Different error messages are returned to failed authentication attempts in case of the usage of a wrong password or a non existent user.

This issue affects Life 1st: 1.5.2.14234.