Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:34:40 +0000 EUVD-2026-269908 https://cve.radiocsirt.org/vuln/euvd-2026-269908 EUVD-2026-269908 https://cve.radiocsirt.org/vuln/euvd-2026-269908 fkie_cve-2026-2896 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2896 <p>A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.</p> <p>A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2896 GHSA-5m2g-4cf6-c3rg — funadmin has Incorrect Privilege Assignment in its Configuration Handler https://cve.radiocsirt.org/vuln/ghsa-5m2g-4cf6-c3rg <p><strong>Affected:</strong> Packagist: funadmin/funadmin</p> <p>A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.</p> <p><strong>Affected:</strong> Packagist: funadmin/funadmin</p> <p>A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.</p> https://cve.radiocsirt.org/vuln/ghsa-5m2g-4cf6-c3rg