https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:09:40.715156+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255236 EUVD-2026-255236 2026-10-10T14:09:40.777151+00:00 EUVD-2026-255236 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54461 fkie_cve-2025-54461 2026-10-10T14:09:40.777189+00:00

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.

 https://cve.radiocsirt.org/vuln/ghsa-fhch-v2x2-xm9c GHSA-fhch-v2x2-xm9c 2026-10-10T14:09:40.777232+00:00

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000076 jvndb-2025-000076 2026-10-10T14:09:40.777248+00:00

ChatLuck provided by NEOJAPAN Inc. contains multiple vulnerabilities listed below. <ul><li>Cross-site scripting vulnerability in Chat Rooms (CWE-79) - CVE-2025-53858</li> <li>Insufficient granularity of access control vulnerability in Invitation of Guest Users (CWE-1220) - CVE-2025-54461</li> <li>Cross-site scripting vulnerability in Guest User Sign-up (CWE-79) - CVE-2025-58115</li></ul> Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.