https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T13:19:23.471191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373898 EUVD-2026-373898 2026-10-14T13:19:23.473505+00:00 EUVD-2026-373898 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15630 fkie_cve-2026-15630 2026-10-14T13:19:23.473534+00:00

A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).

 https://cve.radiocsirt.org/vuln/ghsa-jhfj-h4g6-q9h9 GHSA-jhfj-h4g6-q9h9 2026-10-14T13:19:23.473563+00:00

A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).