https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:25:04.876562+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330306 EUVD-2026-330306 2026-10-05T18:25:04.907715+00:00 EUVD-2026-330306 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45757 fkie_cve-2026-45757 2026-10-05T18:25:04.907751+00:00

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, Rocket.Chat allows users deactivated through users.deactivateIdle to keep using already-issued login tokens. A user that an administrator has marked inactive for idleness can still access authenticated REST endpoints with the old token. This vulnerability is fixed in 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12.