https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T01:12:18.169640+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-268113 EUVD-2026-268113 2026-10-10T01:12:18.171869+00:00 EUVD-2026-268113 https://cve.radiocsirt.org/vuln/fkie_cve-2025-70758 fkie_cve-2025-70758 2026-10-10T01:12:18.171902+00:00

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

 https://cve.radiocsirt.org/vuln/ghsa-pvgq-2pr4-wxj6 GHSA-pvgq-2pr4-wxj6 2026-10-10T01:12:18.171933+00:00

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.