https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:31:02.678507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-245895 EUVD-2026-245895 2026-10-06T16:31:02.746671+00:00 EUVD-2026-245895 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41404 fkie_cve-2025-41404 2026-10-06T16:31:02.746715+00:00

Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.

 https://cve.radiocsirt.org/vuln/ghsa-gcxj-65c6-wcrg GHSA-gcxj-65c6-wcrg 2026-10-06T16:31:02.746768+00:00

Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000043 jvndb-2025-000043 2026-10-06T16:31:02.746797+00:00

iroha Board provided by iroha Soft Co., Ltd. contains multiple vulnerabilities listed below. <ul><li>Forced browsing (CWE-425) - CVE-2025-41404</li> <li>Cross-site request forgery (CWE-352) - CVE-2025-48497</li></ul> Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.