https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:40:31.129364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-327398 EUVD-2026-327398 2026-10-10T16:40:31.161079+00:00 EUVD-2026-327398 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47181 fkie_cve-2026-47181 2026-10-10T16:40:31.161117+00:00

PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to change the password of an account, leading to full account takeover. An attacker only needs a registered account and a valid password reset token for their own account. This issue has been patched in version 1.0.0.