https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:13:58.048827+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336531 EUVD-2026-336531 2026-10-09T03:13:58.095299+00:00 EUVD-2026-336531 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22199 fkie_cve-2026-22199 2026-10-09T03:13:58.095342+00:00

Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by supplying directory traversal sequences in the params parameter. Attackers can exploit this vulnerability to disclose sensitive files such as password hashes, which can be cracked offline to obtain root-level access and enable full system compromise.

 https://cve.radiocsirt.org/vuln/ghsa-qgvm-cj9x-53jj GHSA-qgvm-cj9x-53jj 2026-10-09T03:13:58.095391+00:00

wpDiscuz before 7.6.47 contains a vote manipulation vulnerability that allows attackers to manipulate comment votes by obtaining fresh nonces and bypassing rate limiting through client-controlled headers. Attackers can vary User-Agent headers to reset rate limits, request nonces from the unauthenticated wpdGetNonce endpoint, and vote multiple times using IP rotation or reverse proxy header manipulation.