<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 23 Oct 2026 16:01:04 +0000</lastBuildDate>
    <item>
      <title>EUVD-2026-207540</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-207540</link>
      <description>EUVD-2026-207540</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-207540</guid>
    </item>
    <item>
      <title>fkie_cve-2024-55186</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-55186</link>
      <description>&lt;p&gt;An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-55186</guid>
    </item>
    <item>
      <title>GHSA-2hr5-cvwp-jr5w — Oqtane Framework Insecure Direct Object Reference vulnerability</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-2hr5-cvwp-jr5w</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; NuGet: Oqtane.Framework, NuGet: Oqtane.Client, NuGet: Oqtane.Server, NuGet: Oqtane.Shared&lt;/p&gt;
&lt;p&gt;An IDOR (Insecure Direct Object Reference) vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; NuGet: Oqtane.Framework, NuGet: Oqtane.Client, NuGet: Oqtane.Server, NuGet: Oqtane.Shared&lt;/p&gt;
&lt;p&gt;An IDOR (Insecure Direct Object Reference) vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-2hr5-cvwp-jr5w</guid>
    </item>
  </channel>
</rss>
