https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:26:19.739676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277285 EUVD-2026-277285 2026-10-06T22:26:19.772274+00:00 EUVD-2026-277285 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33330 fkie_cve-2026-33330 2026-10-06T22:26:19.772314+00:00

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save callback to overwrite that file with attacker-controlled content. This issue has been patched in version 3.10.0.