https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:01:14.724115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375132 EUVD-2026-375132 2026-10-02T11:01:14.726290+00:00 EUVD-2026-375132 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92920 fkie_cve-2026-92920 2026-10-02T11:01:14.726320+00:00

admin3 through 3.0.0 fails to invalidate existing sessions when disabling a user account, allowing attackers to retain authenticated access with original permissions. Attackers can continue using bearer tokens issued before account disablement to authenticate requests, as the AuthInterceptor never re-validates the user's locked status and session expiry resets on each request.

 https://cve.radiocsirt.org/vuln/ghsa-xx9v-9858-mwgg GHSA-xx9v-9858-mwgg 2026-10-02T11:01:14.726352+00:00

admin3 through 3.0.0 fails to invalidate existing sessions when disabling a user account, allowing attackers to retain authenticated access with original permissions. Attackers can continue using bearer tokens issued before account disablement to authenticate requests, as the AuthInterceptor never re-validates the user's locked status and session expiry resets on each request.