https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:54:55.431327+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-266596 EUVD-2026-266596 2026-10-06T23:54:55.433346+00:00 EUVD-2026-266596 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23958 fkie_cve-2026-23958 2026-10-06T23:54:55.433377+00:00

Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase uses the MD5 hash of the user’s password as the JWT signing secret. This deterministic secret derivation allows an attacker to brute-force the admin’s password by exploiting unmonitored API endpoints that verify JWT tokens. The vulnerability has been fixed in v2.10.19. No known workarounds are available.