https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:44:40.666369+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2025-63391 fkie_cve-2025-63391 2026-10-17T11:44:40.702696+00:00

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

 https://cve.radiocsirt.org/vuln/ghsa-hqhc-8hp4-hrwc GHSA-hqhc-8hp4-hrwc 2026-10-17T11:44:40.702752+00:00

An authentication bypass vulnerability exists in Open-WebUI <=0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers.