https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:46:53.709693+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07989 bdu:2026-07989 2026-10-15T23:46:53.797230+00:00 bdu:2026-07989 https://cve.radiocsirt.org/vuln/euvd-2026-336681 EUVD-2026-336681 2026-10-15T23:46:53.797267+00:00 EUVD-2026-336681 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28515 fkie_cve-2026-28515 2026-10-15T23:46:53.797281+00:00

openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.

 https://cve.radiocsirt.org/vuln/ghsa-mg2w-x76x-59h8 GHSA-mg2w-x76x-59h8 2026-10-15T23:46:53.797311+00:00

openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.