https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:03:45.220664+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339242 EUVD-2026-339242 2026-10-06T13:03:45.279168+00:00 EUVD-2026-339242 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13381 fkie_cve-2026-13381 2026-10-06T13:03:45.279241+00:00

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server.

 https://cve.radiocsirt.org/vuln/ghsa-5xwg-q2hm-f263 GHSA-5xwg-q2hm-f263 2026-10-06T13:03:45.279296+00:00

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server.