https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:44:47.256522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263905 EUVD-2026-263905 2026-10-16T20:44:47.321519+00:00 EUVD-2026-263905 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47220 fkie_cve-2025-47220 2026-10-16T20:44:47.321555+00:00

A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an existing file, readable by the user running the application server, but is not a recognized image format, it will return this as an error to the clientside, confirming the existences of the file.

 https://cve.radiocsirt.org/vuln/ghsa-8pfw-fjhm-qgcf GHSA-8pfw-fjhm-qgcf 2026-10-16T20:44:47.321588+00:00

Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 1 of 3.