https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:05:40.931841+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291414 EUVD-2026-291414 2026-10-06T02:05:40.963335+00:00 EUVD-2026-291414 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33146 fkie_cve-2026-33146 2026-10-06T02:05:40.963371+00:00

Docmost is open-source collaborative wiki and documentation software. An authorization bypass vulnerability in versions 0.70.0 through 0.70.2 exposes restricted child page titles and text snippets through the public search endpoint (`POST /api/search/share-search`) for publicly shared content. This flaw allows unauthenticated users to enumerate and retrieve content that should remain hidden from public share viewers, leading to a confidentiality breach. Version 0.70.3 contains a patch.