https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:28:54.942145+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-369817 EUVD-2026-369817 2026-10-06T04:28:54.987480+00:00 EUVD-2026-369817 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92469 fkie_cve-2026-92469 2026-10-06T04:28:54.987515+00:00

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and delete arbitrary users' files and metadata by supplying their identifiers to the delete endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-x7gm-hm27-4pgr GHSA-x7gm-hm27-4pgr 2026-10-06T04:28:54.987549+00:00

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and delete arbitrary users' files and metadata by supplying their identifiers to the delete endpoint.