https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:52:58.462836+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-48780 CVE-2026-48780 — Forem vulnerable to bypass of email address domain restrictions 2026-10-07T18:52:58.485984+00:00

Affected: forem

Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patched as of `a2ab6d4`. As a workaround, some SMTP servers and email delivery providers may drop or refuse to send maliciously crafted email addresses.