https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:09:01.413730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-328461 EUVD-2026-328461 2026-10-06T03:09:01.490362+00:00 EUVD-2026-328461 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53676 fkie_cve-2026-53676 2026-10-06T03:09:01.490417+00:00

ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administrator privilege (TENANT_ADMIN).

 https://cve.radiocsirt.org/vuln/ghsa-prc2-x3qx-38m9 GHSA-prc2-x3qx-38m9 2026-10-06T03:09:01.490463+00:00

ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administrator privilege (TENANT_ADMIN).

 https://cve.radiocsirt.org/vuln/jvndb-2026-000086 jvndb-2026-000086 2026-10-06T03:09:01.490491+00:00

ThingsBoard contains the following vulnerability<a href='https://cwe.mitre.org/data/definitions/1321.html' target='_blank'></a><ul><li>Prototype Pollution (CWE-1321) - CVE-2026-53676</li></ul>HIROKI IMAI of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.