https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:29:21.528239+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366126 EUVD-2026-366126 2026-10-06T15:29:21.574981+00:00 EUVD-2026-366126 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17038 fkie_cve-2026-17038 2026-10-06T15:29:21.575018+00:00

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading and modifying tickets.

 https://cve.radiocsirt.org/vuln/ghsa-4qc3-v5c2-6x2v GHSA-4qc3-v5c2-6x2v 2026-10-06T15:29:21.575050+00:00

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading and modifying tickets.