https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:01:50.311405+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352184 EUVD-2026-352184 2026-10-08T07:01:50.359256+00:00 EUVD-2026-352184 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18750 fkie_cve-2026-18750 2026-10-08T07:01:50.359295+00:00

vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing (or read email/name) for another vendor's contact.

 https://cve.radiocsirt.org/vuln/ghsa-j5jq-5w3c-xc48 GHSA-j5jq-5w3c-xc48 2026-10-08T07:01:50.359330+00:00

vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing (or read email/name) for another vendor's contact.