https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:17:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07989 bdu:2026-07989 https://cve.radiocsirt.org/vuln/bdu:2026-07989 https://cve.radiocsirt.org/vuln/euvd-2026-336681 EUVD-2026-336681 https://cve.radiocsirt.org/vuln/euvd-2026-336681 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28515 <p>openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.</p> <p>openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28515 https://cve.radiocsirt.org/vuln/ghsa-mg2w-x76x-59h8 <p>openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.</p> <p>openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-mg2w-x76x-59h8