https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 15:59:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-384259 EUVD-2026-384259 https://cve.radiocsirt.org/vuln/euvd-2026-384259 https://cve.radiocsirt.org/vuln/fkie_cve-2025-70522 <p>The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request Forgery Attacks against any endpoint.</p> <p>The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request Forgery Attacks against any endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-70522 https://cve.radiocsirt.org/vuln/ghsa-mqgg-wf4q-w7jv <p>The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request Forgery Attacks against any endpoint.</p> <p>The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request Forgery Attacks against any endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-mqgg-wf4q-w7jv