https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:48:51.924197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361860 EUVD-2026-361860 2026-10-06T13:48:51.971539+00:00 EUVD-2026-361860 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82878 fkie_cve-2026-82878 2026-10-06T13:48:51.971579+00:00

DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard linkages, and retrieve chart metadata and configuration for resources they do not own by supplying arbitrary identifiers in requests.

 https://cve.radiocsirt.org/vuln/ghsa-v7cf-2ghm-9jxr GHSA-v7cf-2ghm-9jxr 2026-10-06T13:48:51.971613+00:00

DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard linkages, and retrieve chart metadata and configuration for resources they do not own by supplying arbitrary identifiers in requests.