https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:33:57.707242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-377258 EUVD-2026-377258 2026-10-08T06:33:57.709354+00:00 EUVD-2026-377258 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92764 fkie_cve-2026-92764 2026-10-08T06:33:57.709387+00:00

OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to, bypassing intended token isolation boundaries.

 https://cve.radiocsirt.org/vuln/ghsa-chx7-hm9p-hcvg GHSA-chx7-hm9p-hcvg 2026-10-08T06:33:57.709445+00:00

OpenCVE before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to, bypassing intended token isolation boundaries.