https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:29:58.218997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374906 EUVD-2026-374906 2026-10-08T03:29:58.267613+00:00 EUVD-2026-374906 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75103 fkie_cve-2026-75103 2026-10-08T03:29:58.267653+00:00

Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator credentials to achieve full account takeover and arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-jm7g-x36v-768h GHSA-jm7g-x36v-768h 2026-10-08T03:29:58.267686+00:00

Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator credentials to achieve full account takeover and arbitrary code execution.