https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:27:27.390602+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-13381 CVE-2026-13381 — VSee Clinic and API Insecure Direct Object Reference in File API Allows Unauthorized File Access and Deletion 2026-10-08T09:27:27.410641+00:00

Affected: VSee Clinic

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server.