https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:31:48.138372+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-377130 EUVD-2026-377130 2026-10-07T08:31:48.185888+00:00 EUVD-2026-377130 https://cve.radiocsirt.org/vuln/fkie_cve-2026-100305 fkie_cve-2026-100305 2026-10-07T08:31:48.185929+00:00

TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create. Authenticated attackers who know a form's key can submit unlimited entries to any form, bypassing publish status, time window, quota, and per-IP restrictions to falsify collected results.

 https://cve.radiocsirt.org/vuln/ghsa-6w6p-j4gp-7cph GHSA-6w6p-j4gp-7cph 2026-10-07T08:31:48.185964+00:00

TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create. Authenticated attackers who know a form's key can submit unlimited entries to any form, bypassing publish status, time window, quota, and per-IP restrictions to falsify collected results.