https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:42:51.199806+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384287 EUVD-2026-384287 2026-10-10T18:42:51.247912+00:00 EUVD-2026-384287 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107270 fkie_cve-2026-107270 2026-10-10T18:42:51.247951+00:00

Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending profiles. Attackers can supply another user's sequential id in POST requests to /api/groups/, /api/templates/, /api/pages/ or /api/smtp/ to overwrite and reassign objects, locking out owners and exposing victims' recipient lists.

 https://cve.radiocsirt.org/vuln/ghsa-5h35-6pm3-mw32 GHSA-5h35-6pm3-mw32 2026-10-10T18:42:51.247987+00:00

Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending profiles. Attackers can supply another user's sequential id in POST requests to /api/groups/, /api/templates/, /api/pages/ or /api/smtp/ to overwrite and reassign objects, locking out owners and exposing victims' recipient lists.