https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T04:16:13.281220+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331685 EUVD-2026-331685 2026-10-10T04:16:13.312266+00:00 EUVD-2026-331685 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53905 fkie_cve-2026-53905 2026-10-10T04:16:13.312302+00:00

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged user can retrieve administrator access control structures without proper authorization checks. This may expose sensitive permission mappings and internal configuration details.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 25.3.3.1 but may also affect other versions.

 https://cve.radiocsirt.org/vuln/ghsa-4hjp-j24w-p3rr GHSA-4hjp-j24w-p3rr 2026-10-10T04:16:13.312339+00:00

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged user can retrieve administrator access control structures without proper authorization checks. This may expose sensitive permission mappings and internal configuration details.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 25.3.3.1 but may also affect other versions.