https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:40:13.302702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-275118 EUVD-2026-275118 2026-10-05T16:40:13.333267+00:00 EUVD-2026-275118 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62166 fkie_cve-2025-62166 2026-10-05T16:40:13.333304+00:00

FreshRSS is a free, self-hostable RSS aggregator. Prior 1.28.0, a bug in the auth logic related to master authentication tokens, this restriction is bypassed. Usually only the default user's feed should be viewable if anonymous viewing is enabled, and feeds of other users should be private. This vulnerability is fixed in 1.28.0.