https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:25:59.811715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375111 EUVD-2026-375111 2026-10-04T13:25:59.814716+00:00 EUVD-2026-375111 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91997 fkie_cve-2026-91997 2026-10-04T13:25:59.814750+00:00

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version, database client name, configured server URL, and WhatsApp instance details.

 https://cve.radiocsirt.org/vuln/ghsa-755x-c9g7-3hr7 GHSA-755x-c9g7-3hr7 2026-10-04T13:25:59.814782+00:00

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version, database client name, configured server URL, and WhatsApp instance details.