https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T10:35:06.922358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-49488 CVE-2026-49488 — Apache OpenMeetings: Arbitrary File Read 2026-10-15T10:35:06.923453+00:00

Affected: Apache Software Foundation Apache OpenMeetings

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OpenMeetings.

This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM server, including credentials and secrets, via a crafted download request.

Users are recommended to upgrade to version 9.1.0, which fixes the issue.