https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:36:08.507633+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-350906 EUVD-2026-350906 2026-10-17T23:36:08.510909+00:00 EUVD-2026-350906 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40127 fkie_cve-2026-40127 2026-10-17T23:36:08.510951+00:00

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application.

This issue was fixed in OutSystems Lifetime version 11.28.2.3955

 https://cve.radiocsirt.org/vuln/ghsa-jrw3-h5q4-rwxc GHSA-jrw3-h5q4-rwxc 2026-10-17T23:36:08.511000+00:00

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application.

This issue was fixed in OutSystems Lifetime version 11.28.2.3955