https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:47:57.311306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278136 EUVD-2026-278136 2026-10-06T08:47:57.346103+00:00 EUVD-2026-278136 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33953 fkie_cve-2026-33953 2026-10-06T08:47:57.346148+00:00

LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs server-side requests to internal-only resources when those resources are referenced through an internal hostname. This allows an authenticated user to trigger server-side requests to internal services reachable by the LinkAce server but not directly reachable by an external user. Version 2.5.3 patches the issue.