https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T16:08:04.193890+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-38470 CVE-2026-38470 2026-10-28T16:08:04.195547+00:00

A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created API token.