https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:14:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-251217 EUVD-2026-251217 https://cve.radiocsirt.org/vuln/euvd-2026-251217 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6914 <p>An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.</p> <p>This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the &#34;/services&#34; context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the &#34;Security Guidelines for Production Deployment&#34; by disabling exposure to untrusted networks.</p> <p>An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.</p> <p>This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the &#34;/services&#34; context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the &#34;Security Guidelines for Production Deployment&#34; by disabling exposure to untrusted networks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6914 https://cve.radiocsirt.org/vuln/ghsa-hqgr-xf2j-75r5 <p>An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.</p> <p>This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the &#34;/services&#34; context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the &#34;Security Guidelines for Production Deployment&#34; by disabling exposure to untrusted networks.</p> <p>An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.</p> <p>This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the &#34;/services&#34; context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the &#34;Security Guidelines for Production Deployment&#34; by disabling exposure to untrusted networks.</p> https://cve.radiocsirt.org/vuln/ghsa-hqgr-xf2j-75r5