https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:07:42.657278+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-65097 CVE-2025-65097 — Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collections 2026-10-09T07:07:42.674679+00:00

Affected: rommapp romm

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. Prior to 4.4.1 and 4.4.1-beta.2, an Authenticated User can delete collections belonging to other users by directly sending a DELETE request to the collection endpoint. No ownership verification is performed before deleting collections. This vulnerability is fixed in 4.4.1 and 4.4.1-beta.2.