https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:41:34.832625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363986 EUVD-2026-363986 2026-10-04T10:41:34.879798+00:00 EUVD-2026-363986 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85697 fkie_cve-2026-85697 2026-10-04T10:41:34.879840+00:00

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.

 https://cve.radiocsirt.org/vuln/ghsa-p2hj-fj2f-79j4 GHSA-p2hj-fj2f-79j4 2026-10-04T10:41:34.879872+00:00

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.