https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:04:55.615891+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-15932 CVE-2026-15932 — Support Genix Lite < 1.4.48 - Unauthenticated Arbitrary File Read via Path Traversal 2026-10-07T13:04:55.630536+00:00

Affected: Unknown Support Genix

The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension — including other users' private ticket attachments — from the server.