https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:30:58.588408+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323572 EUVD-2026-323572 2026-10-06T10:30:58.637939+00:00 EUVD-2026-323572 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45701 fkie_cve-2026-45701 2026-10-06T10:30:58.638019+00:00

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6.

 https://cve.radiocsirt.org/vuln/ghsa-7fv8-6pp7-6h85 GHSA-7fv8-6pp7-6h85 — Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens 2026-10-06T10:30:58.638056+00:00

Affected: Packagist: sulu/sulu

### Impact

The password reset tokenand API key generation uses a weak cryptographical hash algorithm.

### Patches

Fixed in 2.6.23 and 3.0.6 version.

### Workarounds

Patch the related `User.php` and `ResettingController.php` file in the SecurityBundle.