https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:13:58.630142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325821 EUVD-2026-325821 2026-10-06T14:13:58.689006+00:00 EUVD-2026-325821 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11764 fkie_cve-2026-11764 2026-10-06T14:13:58.689035+00:00

When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to view gift cards. This is inconsistent with the UI and API where only the first letters of the gift card secret are shown. Therefore, it allows circumventing a permission boundary.

 https://cve.radiocsirt.org/vuln/ghsa-m6hc-99rm-c9wc GHSA-m6hc-99rm-c9wc 2026-10-06T14:13:58.689066+00:00

When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to view gift cards. This is inconsistent with the UI and API where only the first letters of the gift card secret are shown. Therefore, it allows circumventing a permission boundary.