https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:49:42.128349+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-357402 EUVD-2026-357402 2026-10-05T22:49:42.174553+00:00 EUVD-2026-357402 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76203 fkie_cve-2026-76203 2026-10-05T22:49:42.174588+00:00

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that reconstruct the url() function and evade the sanitizer blocklist

 https://cve.radiocsirt.org/vuln/ghsa-6xgw-5q2h-p29f GHSA-6xgw-5q2h-p29f 2026-10-05T22:49:42.174622+00:00

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that reconstruct the url() function and evade the sanitizer blocklist