https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:56:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-264559 EUVD-2026-264559 https://cve.radiocsirt.org/vuln/euvd-2026-264559 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68932 <p>FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking. The remember-me tokens provide permanent authentication and are the sole credential for &#34;keep me logged in&#34; functionality. This issue has been patched in version 1.28.0.</p> <p>FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking. The remember-me tokens provide permanent authentication and are the sole credential for &#34;keep me logged in&#34; functionality. This issue has been patched in version 1.28.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68932