https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:56:04.944639+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372040 EUVD-2026-372040 2026-10-06T04:56:04.991740+00:00 EUVD-2026-372040 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92468 fkie_cve-2026-92468 2026-10-06T04:56:04.991779+00:00

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/{indexName} and GET /agg/requestStat/{indexName}/{routing} path variables. Attackers can query arbitrary indices including sys_user to retrieve sensitive user records and password hashes without proper access controls.

 https://cve.radiocsirt.org/vuln/ghsa-hj6r-7gmv-7mph GHSA-hj6r-7gmv-7mph 2026-10-06T04:56:04.991814+00:00

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/{indexName} and GET /agg/requestStat/{indexName}/{routing} path variables. Attackers can query arbitrary indices including sys_user to retrieve sensitive user records and password hashes without proper access controls.