https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:07:56.687767+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373071 EUVD-2026-373071 2026-10-03T12:07:56.752076+00:00 EUVD-2026-373071 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92467 fkie_cve-2026-92467 2026-10-03T12:07:56.752119+00:00

zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request body and a new password to overwrite credentials of any non-administrator account without verification.

 https://cve.radiocsirt.org/vuln/ghsa-pc4j-h2fr-9v52 GHSA-pc4j-h2fr-9v52 2026-10-03T12:07:56.752155+00:00

zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request body and a new password to overwrite credentials of any non-administrator account without verification.