https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:44:40.867879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291159 EUVD-2026-291159 2026-10-07T13:44:40.926402+00:00 EUVD-2026-291159 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23782 fkie_cve-2026-23782 2026-10-07T13:44:40.926454+00:00

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint allows unauthenticated users to obtain both an API identifier and its corresponding secret value. With these exposed secrets, an attacker could invoke privileged API operations, potentially leading to unauthorized access.

 https://cve.radiocsirt.org/vuln/ghsa-83mf-f2q6-j3gg GHSA-83mf-f2q6-j3gg 2026-10-07T13:44:40.926500+00:00

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint allows unauthenticated users to obtain both an API identifier and its corresponding secret value. With these exposed secrets, an attacker could invoke privileged API operations, potentially leading to unauthorized access.