https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:11:24.265623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09841 bdu:2025-09841 2026-10-06T11:11:24.335391+00:00 bdu:2025-09841 https://cve.radiocsirt.org/vuln/euvd-2026-250523 EUVD-2026-250523 2026-10-06T11:11:24.335436+00:00 EUVD-2026-250523 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36026 fkie_cve-2025-36026 2026-10-06T11:11:24.335451+00:00

IBM Datacap 9.1.7, 9.1.8, and 9.1.9

does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

 https://cve.radiocsirt.org/vuln/ghsa-8r4j-cg5x-mv4q GHSA-8r4j-cg5x-mv4q 2026-10-06T11:11:24.335486+00:00

IBM Datacap 9.1.7, 9.1.8, and 9.1.9

does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.