https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:53:28.964503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-41308 CVE-2026-41308 — Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication 2026-10-08T02:53:28.979420+00:00

Affected: pglombardo PasswordPusher

Password Pusher is an open source application to communicate sensitive information over the web. Prior to versions 1.69.3 and 2.4.2, a security issue in OSS PasswordPusher allowed unauthenticated creation of file-type pushes through a generic JSON API create path under certain configurations. This could bypass the intended authentication boundary for file push creation. This issue has been patched in versions 1.69.3 and 2.4.2.