https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T09:26:36.486337+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361868 EUVD-2026-361868 2026-10-10T09:26:36.545691+00:00 EUVD-2026-361868 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68951 fkie_cve-2026-68951 2026-10-10T09:26:36.545726+00:00

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data.

 https://cve.radiocsirt.org/vuln/ghsa-qx8p-4g5w-55fv GHSA-qx8p-4g5w-55fv 2026-10-10T09:26:36.545759+00:00

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000089 jvndb-2026-000089 2026-10-10T09:26:36.545776+00:00

GROWI provided by GROWI, Inc. contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/639.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/863.html' target='_blank'></a><ul><li>Authorization bypass through user-controlled key in the bookmark folder APIs (CWE-639) - CVE-2026-53620</li><li>Incorrect authorization in the bookmark listing APIs (CWE-863) - CVE-2026-68951</li></ul>CVE-2026-53620 Masashi Kawamoto reported this vulnerability to JPCERT/CC, and Fumito Otake of The Japan Research Institute, Limited. reported the same vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-68951 GROWI, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and GROWI, Inc. coordinated under the Information Security Early Warning Partnership.