https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:54:12.787625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05296 bdu:2026-05296 2026-10-18T02:54:12.790254+00:00 bdu:2026-05296 https://cve.radiocsirt.org/vuln/euvd-2026-275132 EUVD-2026-275132 2026-10-18T02:54:12.790287+00:00 EUVD-2026-275132 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30230 fkie_cve-2026-30230 2026-10-18T02:54:12.790302+00:00

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password for password‑protected files. It checks ownership/admin for private files but skips password verification, allowing thumbnail access without the password. This issue has been patched in version 1.7.2.