https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:33:19.453233+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-28790 CVE-2026-28790 — OliveTin: Unauthenticated Action Termination via KillAction When Guests Must Login 2026-10-07T14:33:19.468553+00:00

Affected: OliveTin

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0.