https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:51:02.291160+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371570 EUVD-2026-371570 2026-10-07T00:51:02.520285+00:00 EUVD-2026-371570 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92794 fkie_cve-2026-92794 2026-10-07T00:51:02.520337+00:00

OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document identifier from guest signing links to retrieve complete document details including all signers' information, sender identity, and valid download tokens without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-x43r-25j9-cfc4 GHSA-x43r-25j9-cfc4 2026-10-07T00:51:02.520385+00:00

OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document identifier from guest signing links to retrieve complete document details including all signers' information, sender identity, and valid download tokens without authentication.