https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:52:14.743905+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-350762 EUVD-2026-350762 2026-10-07T06:52:14.789451+00:00 EUVD-2026-350762 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72688 fkie_cve-2026-72688 2026-10-07T06:52:14.789485+00:00

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTER_KEY-signed file access tokens for any caller-supplied URL without performing any session check, defeating the only access control protecting stored contract files.

 https://cve.radiocsirt.org/vuln/ghsa-jppp-j33j-6m5q GHSA-jppp-j33j-6m5q 2026-10-07T06:52:14.789518+00:00

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTER_KEY-signed file access tokens for any caller-supplied URL without performing any session check, defeating the only access control protecting stored contract files.