https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:32:57.988840+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-7579 CVE-2026-7579 — AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials 2026-10-06T20:32:58.026561+00:00

Affected: AstrBotDevs AstrBot

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-mq9q-25hm-g4gp GHSA-mq9q-25hm-g4gp — AstrBot Makes Use of Hard-coded Password 2026-10-06T20:32:58.026696+00:00

Affected: PyPI: AstrBot

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.