https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:12:56.981061+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-75103 CVE-2026-75103 — Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover 2026-10-08T07:12:57.002783+00:00

Affected: crawlab-team crawlab

Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator credentials to achieve full account takeover and arbitrary code execution.