https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:19:15.646406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337886 EUVD-2026-337886 2026-10-06T19:19:15.713937+00:00 EUVD-2026-337886 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46458 fkie_cve-2026-46458 2026-10-06T19:19:15.713976+00:00

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This issue has been fixed in version 2.4.18.029

 https://cve.radiocsirt.org/vuln/ghsa-pc6h-25p2-384f GHSA-pc6h-25p2-384f 2026-10-06T19:19:15.714011+00:00

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This issue has been fixed in version 2.4.18.029