https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:01:35.394184+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341369 EUVD-2026-341369 2026-10-07T17:01:35.443435+00:00 EUVD-2026-341369 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63094 fkie_cve-2026-63094 2026-10-07T17:01:35.443474+00:00

SigNoz before 0.134.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated attackers to steal session tokens from any user on instances configured with Google OAuth, SAML, or OIDC. Attackers can call the unauthenticated sessions context endpoint with a ref parameter pointing to an attacker-controlled host, deliver the resulting crafted login URL to a victim, and receive the victim's access and refresh tokens when they complete SSO authentication.

 https://cve.radiocsirt.org/vuln/ghsa-xmw5-w4c2-cp2g GHSA-xmw5-w4c2-cp2g 2026-10-07T17:01:35.443520+00:00

SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated attackers to steal session tokens from any user on instances configured with Google OAuth, SAML, or OIDC. Attackers can call the unauthenticated sessions context endpoint with a ref parameter pointing to an attacker-controlled host, deliver the resulting crafted login URL to a victim, and receive the victim's access and refresh tokens when they complete SSO authentication.