https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:55:19.559911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-26375 CVE-2025-26375 2026-10-06T23:55:19.601369+00:00

Affected: Q-Free MaxTime

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create users with arbitrary privileges via crafted HTTP requests.