https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:51:35.502623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261650 EUVD-2026-261650 2026-10-07T10:51:35.548182+00:00 EUVD-2026-261650 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58097 fkie_cve-2025-58097 2026-10-07T10:51:35.548219+00:00

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege.

 https://cve.radiocsirt.org/vuln/ghsa-8mxp-vvjc-j78g GHSA-8mxp-vvjc-j78g 2026-10-07T10:51:35.548251+00:00

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000106 jvndb-2025-000106 2026-10-07T10:51:35.548267+00:00

LogStare Collector provided by LogStare Inc. contains multiple vulnerabilities listed below.<ul><li>Incorrect default permissions for the installation directory (CWE-276) - CVE-2025-58097</li><li>Stored cross-site scripting vulnerability in UserManagement (CWE-79) - CVE-2025-61949</li><li>Incorrect authorization in UserRegistration (CWE-863) - CVE-2025-62189</li><li>Cross-site request forgery (CWE-352) - CVE-2025-62687</li><li>Insertion of sensitive information into sent data (CWE-201) - CVE-2025-64299</li><li>Uncontrolled search path element (CWE-427) - CVE-2025-64695</li></ul> Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.