https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:16:21.344309+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338455 EUVD-2026-338455 2026-10-06T01:16:21.375977+00:00 EUVD-2026-338455 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54728 fkie_cve-2026-54728 2026-10-06T01:16:21.376011+00:00

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the BunkerWeb UI and API improperly validated and neutralized user-controlled input in a configuration-dependent path, allowing a low-privileged authenticated user to escalate privileges and affect confidentiality, integrity, and availability of the BunkerWeb instance. This issue is fixed in BunkerWeb version 1.6.12 and BunkerWeb PRO version 0.57.