https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:46:36.774916+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-253857 EUVD-2026-253857 2026-10-06T15:46:36.825390+00:00 EUVD-2026-253857 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8117 fkie_cve-2025-8117 2026-10-06T15:46:36.825434+00:00

PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. This issue affects all 3 templates: www, bip and www+bip.

This product is End-Of-Life and producent will not publish patches for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-fx82-rmfc-9cqg GHSA-fx82-rmfc-9cqg 2026-10-06T15:46:36.825470+00:00

PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. This issue affects all 3 templates: www, bip and www+bip.

This product is End-Of-Life and producent will not publish patches for this vulnerability.